======================================================================== | # Title : Joomla com_branch 3.0 Sql injection vulnerability | # Author : indoushka | # email : indoushka4ever@gmail.com | # Tested on: windows 8.1 Franais V.(Pro) | # Vendor : http://extensions.joomla.org/extension/ ======================================================================== Drok : allinurl:"index.php?option=com_branch" Sql injection : http://www.greenlightpharmacy.com/index.php?option=com_branch&view=branchlist&layout=branch_detail&store=483 (inject her) Greetz : jericho http://attrition.org & http://www.osvdb.org/ * http://packetstormsecurity.com * Larry W. Cashdollar* Hussin-X *D4NB4R * ViRuS_Ra3cH * yasMouh * https://www.corelan.be * ---------------------------------------------------------------------------------------------------------------