======================================================================== | # Title : Joomla com_xmap 2.3.4 Sql injection vulnerability | # Author : indoushka | # email : indoushka4ever@gmail.com | # Tested on: windows 8.1 Franais V.(Pro) | # Vendor : https://github.com/guilleva/Xmap/blob/master/xmap-update.xml ======================================================================== Sql injection : http://www.unhcr.org.in/index.php?option=com_xmap&view=html&id=1&Itemid=115 (inject her) Greetz : jericho http://attrition.org & http://www.osvdb.org/ * http://packetstormsecurity.com * Larry W. Cashdollar* Hussin-X *D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * ---------------------------------------------------------------------------------------------------------------