Joomla jVoteSystem Component 2.56 SQL Injection

2016.09.13
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89

###################### # Exploit Title : Joomla jVoteSystem 2.56 Component - SQL Injection # Exploit Author : Persian Hack Team # Vendor Homepage : https://joomess.de/projects/jvotesystem # Category [ Webapps ] # Tested on [ Win ] # Version : 2.56 # Date 2016/09/08 ###################### # # PoC # => Sql Injection : # Keyword Parameter Vulnerable To SQL # Demo : # http://www.site.com/index.php?option=com_jvotesystem&view=polls&cat=cw&keyword={SQL}&Itemid=12 # Youtube : https://youtu.be/LfxpuV47Q7M ###################### # Discovered by : Mojtaba MobhaM Mail:Kazemimojtaba@live.com # B3li3v3 M3 I will n3v3r St0p # Greetz : T3NZOG4N & FireKernel & Dr.Askarzade & Masood Ostad & Dr.Koorangi & Milad Hacking & JOK3R $ Mr_Mask_Black And All Persian Hack Team Members # Homepage : http://persian-team.ir ######################

References:

https://youtu.be/LfxpuV47Q7M


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2026, cxsecurity.com

 

Back to Top