Joomla Component com_extcalendar Blind SQL Injection Vulnerability

[+] Post Title :

Joomla Component com_extcalendar Blind SQL Injection Vulnerability

[+] Date : Jumat, 07 Februari 2014
[+] Author : SixZero
[+] Link : http://b-h-t.blogspot.com/2014/02/joomla-component-comextcalendar-blind.html
[+] Type : Deface, Dork

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

   Joomla Component com_extcalendar Blind SQL Injection Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

# Author : Lagripe-Dz                                                  #

# Home : Indonesian                                                    #

# Tested on: [ win xp sp2 ]                                            #

# Dork  allinurl:"com_extcalendar"                                     #

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

 

[+] Vulnerable File :

http://www.site.com/[PATH]/components/com_extcalendar/cal_popup.php?extmode=view&extid=[BLIND_SQL]

 

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0

                           Bekasi Hacker Team

0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0