Joomla component (com_jdirectory) SQL Injection defects and repair

####
# Exploit Title: Joomla Component com_jdirectory SQL Injection Vulnerability
# Author: Caddy-Dz
# Facebook Page: www.facebook.com/islam.caddy
# E-mail: islam_babia [at] hotmail.com | Caddy-Dz [at] exploit-id.com
# Website: www.exploit-id.com
# Google Dork: inurl:/component/option, com_jdirectory
# Category: Webapps
# Tested on: [Windows 7 Edition Int é gral-French]
# Vendor: http://www.joomace.net/downloads/acesef/extensions/jdirectory-acesef
####
 
 
[*] ExpLo! T:
 
Http://www.bkjia.com/component/option, com_jdirectory/task, show_content/contentid, 1067/catid, 26/directory, 1/Itemid, 0
 
Http://www.bkjia.com/component/option, com_jdirectory/task, show_content/contentid, 1067/catid, 26/directory, 1/Itemid, 0 # Inject Here
 
 
####
 
[+] Peace From Algeria
 
####
 
===================================== ** Algerians Hackers ** = ============================================= |
# Greets To: |
KedAns-Dz, Kalashinkov3 & ** All Algerians Hackers **, jos_ali_joe, zw.t, |
All Exploit-Id Team, (exploit-id.com), (1337day.com), (dis9.com), (exploit-db.com) |
All My Friends: T! RiRou, ChoK0, MeRdaw! , CaRras0, StiffLer, MaaTar, St0fa, Nissou, |
RmZ... others |
========================================================== ========================================================== ===============|