Joomla Component (spidercalendar) Eklentisinde SQL injection Açığı Bulundu. Bu zamana kadar çıkan eklentilerinin çok büyük bölümünde bulunan sql injection açıkları, her gün irdeleniyor, her irdelendiğindede yeni sql injection açıkları bulunuyor. Bakalım ne zaman bitecek
____________________________
dork: inurl:com_spidercalendar
Date: [29-08-2012]
Author: Daniel Barragan “D4NB Version: Last
License: Non-Commercial
Tested on: [Linux(bt5)-Windows(7ultimate)]
Descripcion:
Spider Calendar Lite is a highly configurable Joomla extension which allows you to have multiple organized events in a calendar. You can create as many events as you need for a day. With a simple click on the date you will see the events and their descriptions recorded for that day.
____________