======================================================================== | # Title : Joomla com_forms 1.3.1 Sql injection vulnerability | # Author : indoushka | # email : indoushka4ever@gmail.com | # Tested on: windows 8.1 Franais V.(Pro) | # Vendor : https://github.com/subtext/com_forms/blob/master/forms.xml ======================================================================== Sql injection : http://www.unhcr.org.in/index.php?option=com_forms&view=pages&layout=contact&Itemid=111 (inject her) Greetz : jericho http://attrition.org & http://www.osvdb.org/ * http://packetstormsecurity.com * Larry W. Cashdollar* Hussin-X *D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * ---------------------------------------------------------------------------------------------------------------