# Exploit Title : Joomla com_jbusinessdirectory,SQL injection # Exploit Author : mr.nawaf # Dork : allinurl: "index.php?option=com_jbusinessdirectory" # Date: 2016/07/12 # video : https://www.youtube.com/watch?v=lTUXijOYS8M ____________________________________________________ # Parameter : www.localhost.com/index.php?option=com_jbusinessdirectory&controller=search&view=search&Itemid=600&categoryId=1 # demo : https://greaternewbritainchamber.com//index.php?option=com_jbusinessdirectory&controller=search&view=search&Itemid=600&categoryId=1 === # Discovered by : mr.nawaf # twitter :nawaf_root # youtube : https://www.youtube.com/channel/UCG7jXOjwbcVqO8tXYnONrgQ