The Joomla Jeajaxeventcalendar component suffers from a remote blind SQL injection vulnerability.
6bc220c736620ed2d543a7c42c9297063fbb4e977b9b4e74156ac96c2e9eabb2
=======================================================================
# Joomla Component (com_jeajaxeventcalendar) Blind SQLi Vulnerability
=======================================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
3 3
3 _ __ __ ________ __ __ 3
7 /' \ /'__`\ /'__`\ /\_____ \ /\ \/\ \ 7
1 /\_, \/\_\L\ \ /\_\L\ \\/___//'/' \_\ \ \ \____ 1
3 \/_/\ \/_/_\_<_\/_/_\_<_ /' /' /'_` \ \ '__`\ 3
3 \ \ \/\ \L\ \ /\ \L\ \ /' /' /\ \L\ \ \ \L\ \ 3
7 \ \_\ \____/ \ \____//\_/ \ \___,_\ \_,__/ 7
1 \/_/\/___/ \/___/ \// \/__,_ /\/___/ 1
3 >> Exploit database separated by exploit 3
3 type (local, remote, DoS, etc.) 3
7 7
1 [+] Site : 1337db.com 1
3 [+] Support e-mail : submit[at]1337db.com 3
3 3
7 ######################################### 7
1 I'm XroGuE 1337 Member from 1337 DataBase 1
3 ######################################### 3
3 3
7-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-7
# Name: Joomla Component (com_jeajaxeventcalendar) BSQLi Vulnerability
# price : $22.40
# Vendor: http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html
# Download: http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110
# Date: 2010-11-19 (Happy My BirthDay :P)
# Author: XroGuE
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: http://77.120.101.55 [Inj3ct0r Team]
# Thanks to: ../../Satanic2000 :D/Dr.Mute :P/Baghie Doostan :X/%00 :))
==========================================================================
[+] Dork: inurl:"index.php?option=com_jeajaxeventcalendar"
==========================================================================
[+] vuln: http://127.0.0.1/index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=[SQLi]
[+] Demo: http://www.slide-ireland.com/index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=[SQLi]
==========================================================================