Joomla SQL Injection Vulnerability Exploit Results in Full Administrative Access

joomla-logo

Trustwave SpiderLabs researcher Asaf Orpani has discovered an SQL injection vulnerability in versions 3.2 through 3.4.4 of Joomla, a popular open-source Content Management System (CMS). Combining that vulnerability with other security weaknesses, our Trustwave SpiderLabs researchers are able to gain full administrative access to any vulnerable Joomla site.

Joomla had a 6.6 percent share of the market for website CMSs as of October 20, 2015 according to W3Techs—second only to WordPress. Internet services company BuiltWith estimates that as many as 2.8 million websites worldwide use Joomla.

The secure version is 3.4.5

GA:PI() – Google Analytics PHP Interface and OAuth2

Go to Google Console

Enable Google Analytics API

Create new project

google-console

Go to APIs & auth > Credentials
Click on Create new Client ID, and select Service account and P12 key. Then click on Create Client ID to download it.

ga-admin

Go to Google Analytics Admin and give permissions for read & analyze to the new email that looks something like 381198546241-kwuf1jrlpqbpq1523sx1k0h37tidybhe@developer.gserviceaccount.com

Download gapi-google-analytics-php-interface

And finally some php code:


define('ga_profile_id','YOUR_PROFILE_ID');
$ga = new gapi("381198546241-kwuf1jrlpqbpq1523sx1k0h37tidybhe@developer.gserviceaccount.com","PATH_TO_YOUR_P12_KEY.p12");
$ga->requestReportData(ga_profile_id, $dimensions, $metrics, $sort_metric, $filter, $start_date, $end_date, $start_index=1, $maxResults=30);

This are the basic steps

Primera AP Series Label Applicators

Apply Labels Fast and Accurately

With an AP-Series Label Applicator you’ll be able to apply labels at speeds of up to 1200 per hour. Labels are perfectly applied without wrinkles, giving your finished products a highly professional look.

AP-Series Label Applicators are an ideal accessory to Primera’s LX- or CX-Series label printers. The applicators can also apply roll-fed, pressure-sensitive labels produced by most other flexographic, offset and digital presses.

AP360 is the base model. It quickly and efficiently applies single labels at a time.

AP362 is an advanced model. It can apply one or two different labels to a single container. A built-in LED counter and memory for up to nine front-to-back label offsets is also included.

Features:

Quick set-up and easy operation

  • Accurately applies labels to the front (AP360) or front and back (AP362) with variable spacing
  • Fast – labels are applied at 5.3” (135mm) per second – up to 1200 containers per hour
  • Compact size – fits on most desks and countertops
  • Professionally designed – one of the only semi-automatic label applicators available with UL, CSA and FCC safety and emissions certifications
  • Industrial strength – built with heavy-duty sheet metal and steel for long life

Meet YouTube Red

Meet YouTube Red (http://goo.gl/eiizvT)– a new membership designed to amplify the videos and music you love. Watch ad-free videos whenever you sign in to YouTube or a YouTube app. Save videos to enjoy when you’re offline. And keep your videos playing while using other apps or with your screen off. Your membership keeps supporting the people who make your favorite videos, even while watching ad-free.

1 2