bugtraq - Joomla com_enmasse

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 15 Jun 2016 01:27:33 GMT
From: hamedizadi@...il.com
To: bugtraq@...urityfocus.com
Subject: Joomla com_enmasse  - SQL Injection

# Exploit Title: Joomla com_enmasse  - SQL Injection
 
# Author: [ Hamed Izadi ]

						#IRAN

# Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse
# Category: [ Webapps ]
# Tested on: [ Win ]
# Versions: 5.1-6.4
# Date: 2016/06/15
# Google Dork: inurl:component/enmasse/


# PoC:
# id Parameter Vulnerable To SQL
 
# Demo:
# http://example.com/component/enmasse/term?tmpl=component&id=2%27


# Youtube: https://youtu.be/LB5qVnXhzXE

#  L u Arg