Mr.Quay's Blog: Joomla

Joomla Youtube Gallery Component - SQL Injection Vulnerability

<div class="line number1 index0 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Exploit Title: Joomla component com_youtubegallery - SQL Injection</code></div>
<div class="line number2 index1 alt1" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;">vulnerability</code></div>
<div class="line number3 index2 alt2" style="background: none white !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; font-size: 14px; height: auto !important; left: auto !important; line-height: 15.399999618530273px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; white-space: pre !important; width: auto !important;">
<code class="text plain" style="background: none !important; border-bottom-left-radius: 0px !important; border-bottom-right-radius: 0px !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border: 0px !important; bottom: auto !important; box-sizing: content-box !important; direction: ltr !important; display: inline !important; float: none !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; height: auto !important; left: auto !important; line-height: 1.1em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;"># Google Dork: inurl:index.php?option=com_youtubegallery</code></div>

Joomla Youtube Gallery Component - SQL Injection Vulnerability

# Exploit Title: Joomla component com_youtubegallery - SQL Injection vulnerability # Google Dork: inurl:index.php?option=com_youtubegal...

Lỗ hổng của Joomla ảnh hưởng hàng nghìn website Việt Nam

<div style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; line-height: 20px; margin-bottom: 10px;">
Vài ngày nay, trong giới hacker đang truyền tay nhau một lỗ hổng cực kỳ nguy hiểm nằm trong các phiên bản của Joomla. Lỗ hổng này nằm trong component com_tag của Joomla.</div>
<div style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; line-height: 20px; margin-bottom: 10px;">
Khai thác lỗ hổng, hacker có thể dễ dàng lấy được tài khoản (gồm tên đăng nhập và mật khẩu) của quản trị website. Tuy nhiên do mật khẩu đã được mã hóa (băm MD5), nên những mật khẩu mạnh hacker sẽ khó rất khó để giải mã. Tuy nhiên, nếu website không được phân quyền tốt hacker vẫn có thể tạo ra các backdoor (cửa hậu) từ đó upload webshell lên máy chủ thông qua việc khai thác lỗ hổng SQL Injection.</div>
<div style="background-color: white; box-sizing: border-box; color: #555555; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; line-height: 20px; margin-bottom: 10px; text-align: center;">
<img alt="v-skin" class="aligncenter size-large wp-image-4309" src="http://securitydaily.net/wp-content/uploads/2014/07/v-skin-700x247.png" style="border: 0px; box-sizing: border-box; vertical-align: middle;"></div>

Lỗ hổng của Joomla ảnh hưởng hàng nghìn website Việt Nam

Vài ngày nay, trong giới hacker đang truyền tay nhau một lỗ hổng cực kỳ nguy hiểm nằm trong các phiên bản của Joomla. Lỗ hổng này nằm trong...

Joomla component com_mydyngallery sql injection

‪# ‎ Exploit‬ Title: Joomla component com_mydyngallery sql injection # # Google Dork: inurl:index.php?option=com_mydyngallery #

Joomla All V1.5 Error Based SQL Injection Vulnerability

<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">**Joomla all v1.5 Error Based SQL Injection Vulnerability**
</span><br>
<br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">//...Leaked bY Anon Leaker..//  
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">//..12.12.2012..//
</span><br>
<br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  _     __     __  __     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1   /' \    __  /'__`\  /\ \__  /'__`\     0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\    0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1  \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\     0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1    \ \____/ >> Exploit database separated by exploit   0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0     \/___/    type (local, remote, DoS, etc.)    1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1    1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0  [+] Site    : 1337day.com     0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1  [+] Support e-mail  : submit[at]1337day.com     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0    0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1     ##    1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0     I'm Caddy-dz member from Inj3ct0r Team     1
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">1     ##    0
</span><br>
<span style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: justify;">0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
</span><br>

Joomla All V1.5 Error Based SQL Injection Vulnerability

**Joomla all v1.5 Error Based SQL Injection Vulnerability** //...Leaked bY Anon Leaker..// //..12.12.2012..// 1-=-=-=-=-=-=-=-=-=-=-=...

[TUT] Shell Uploading Via Joomla Admin Panel

<div style="font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 19px;">
<span style="font-size: x-small;">Hello Guys after seeing response to my last article on how to upload shell in wordpress.</span></div>
<div style="font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 19px;">
<span style="font-size: x-small;">I thought of making tut on showing step's on uploading shell in joomla.</span></div>
<div style="font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 19px;">
<span style="font-size: x-small;">Steps</span></div>
<span style="font-family: Georgia, 'Times New Roman', serif; font-size: x-small; line-height: 19px;">1. Suppose we have an access to joomla admin. </span><br>
<div class="separator" style="clear: both; font-family: Arial, Verdana; font-size: 13px; line-height: 19px; text-align: center;">
<span style="font-size: x-small;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwnDR-ECeWLaVgs4XXRkmGAXWJvc3zVLStn7GdycR13m2v0CQeBIpBq4yt7BvWI7JTE4HNiibK5FpbSN_3_jJ4KxxFc3DexQA0mRHmuDtlgKdHnZ8MxsWXmx7W8ZRGCvB26Z_jHSF1Z0zW/s1600/1.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; outline: none; text-decoration: none;"><img border="0" height="467" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwnDR-ECeWLaVgs4XXRkmGAXWJvc3zVLStn7GdycR13m2v0CQeBIpBq4yt7BvWI7JTE4HNiibK5FpbSN_3_jJ4KxxFc3DexQA0mRHmuDtlgKdHnZ8MxsWXmx7W8ZRGCvB26Z_jHSF1Z0zW/s640/1.PNG" style="-webkit-box-shadow: none; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: none; box-shadow: none; margin: 0px 4px 4px 0px; max-width: 99%; padding: 0px;" width="640"></a></span></div>
<span style="font-family: Arial, Verdana; font-size: x-small; line-height: 19px;"></span><br style="font-family: Arial, Verdana; font-size: 13px; line-height: 19px;">
<span style="font-family: Arial, Verdana; font-size: x-small; line-height: 19px;">2.  Once you Login you see the below screen.</span><br>

[TUT] Shell Uploading Via Joomla Admin Panel

Hello Guys after seeing response to my last article on how to upload shell in wordpress. I thought of making tut on showing step's on...

Mr.Quay's Blog

Joomla Youtube Gallery Component - SQL Injection Vulnerability

Lỗ hổng của Joomla ảnh hưởng hàng nghìn website Việt Nam

Joomla component com_mydyngallery sql injection

Joomla All V1.5 Error Based SQL Injection Vulnerability

[TUT] Shell Uploading Via Joomla Admin Panel

Xem Nhiều

Blog Archive

Nhận xét mới đăng tải!