Joomla Component com_wmtpic 1.0 SQL Injection Vulnerability

[vamba]

L'Ultimo aggiornamento della componente risale ad agosto 2009
Si consiglia di rimuovere l'estensione in attesa di un eventuale aggiornamento.

Codice: [Seleziona]

[~] Vendor: http://www.webmaster-tips.net
[~] Download App:http://www.webmaster-tips.net/Download/View-details/9-Joomla-Components/183-Joomla-1.5-Flash-Gallery-wmtPic.html
==========ExPl0iT3d by **RoAd_KiLlEr**==========
 
[+]Description:
Flash based image gallery for Joomla. Joomla component wmtPic, with thumbnail support, caption and multiple file upload option. Although it is not a must, it is better to put a link back to this site "Joomla component by Webmaster-tips.net " on your website if you can. This Joomla 1.5 Component is licensed under the GPLv2.0.
 
=========================================
 
[+] Dork: inurl:"com_wmtpic"
 
==========================================
 
 
[+].  SQL-i Vulnerability
=+=+=+=+=+=+=+=+=+
 
[Exploit]:  http://127.0.0.1/path/index.php?option=com_wmtpic&Itemid=[] <== SQL-i