# Exploit Title: Joomla Component My Car Multiple Vulnerabilities
# Date: 28th May 2010
# Author: Valentin
# Category: webapps/0day
# Version: 1.0
# Tested on:
# CVE :
# Code :
[:::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::]
>> General Information
Advisory/Exploit Title = Joomla Component MyCar Multiple Vulnerabilities
Author = Valentin Hoebel
Contact = valentin@xenuser.org
[:::::::::::::::::::::::::::::::::::::: 0x2 ::::::::::::::::::::::::::::::::::::::]
>> Product information
Name = My Car
Vendor = unisoft.me
Vendor Website = http://www.unisoft.me/extensions/
Affected Version(s) = 1.0
[:::::::::::::::::::::::::::::::::::::: 0x3 ::::::::::::::::::::::::::::::::::::::]
>> XSS
Example URI:
index.php?option=com_mycar&task=1&pagina=0&ordine=preveh&modveh=[XSS]
>> Information Disclosure
Just play around with the parameters and URLS. You will notice that various errors
(e.g. SQL errors) occur. They reveal information about the SQL queries within the
PHP code and the absolute path of the website. Not very dangerous, but sometimes useful.
>> Possible SQL Injection
Triggering SQL errors with the help of several parameters is possible.
Example URI:
index.php?option=com_mycar&task=1&pagina=-1
[:::::::::::::::::::::::::::::::::::::: 0x4 ::::::::::::::::::::::::::::::::::::::]
>> Additional Information
Advisory/Exploit Published = 28th May 2010
[:::::::::::::::::::::::::::::::::::::: 0x5 ::::::::::::::::::::::::::::::::::::::]
>> Misc
Greetz && Thanks = inj3ct0r team, Exploit DB and hack0wn!
Special Greetz = cr4wl3r and /JosS!
<3 packetstormsecurity.org!
[:::::::::::::::::::::::::::::::::::::: EOF ::::::::::::::::::::::::::::::::::::::]
