New User, Welcome!     Login

Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities

From: sattler solidmedia de
To: bugtraq securityfocus com
Cc:
Subject: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities
Date: Sun - Sep 05, 2010 04:38 AM


# Exploit Title: Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerabilities
# Date: 05.09.2010
# Author: Stephan Sattler // Solidmedia
# Software Link: http://www.joomla-clantools.de/downloads/doc_download/7-clantools-123.html
# Version: 1.2.3


[ Vulnerability 1 ]

http://www.site.com/joomlapath/index.php?option=com_clantools&squad=1+[Blind SQL]

[ Vulnerability 2 ]

http://www.site.com/joomlapath/index.php?option=com_clantools&task=clanwar&showgame=1+[Blind SQL]&Itemid=999

#Vulnerability was already reported, have a look at http://www.joomla-clantools.de to get a patch




Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!