Joomla! Component com_annonces – Arbitrary File Upload

Exploit Database
120 阅读

作者： Sid3^effects

日期： 2010-06-06
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/13748/

#Title:Joomla Component com_annonces Upload Vulnerability

# Author: Sid3^effects

# Published: 2010-06-06

# email:shell_c99@yahoo.com

# vendor url : http://joomla.clubnautiquemarine.fr/

# google dork : inurl:com_annonces

############################################################################

ooooo.oooooo.oooooo oooooo oooo

888' d8P'</code>Y8b<code>888.</code>888. .8'

888 888 <code>888. .8888. .8'

888 888</code>888.8'<code>888. .8'

888 888 </code>888.8'<code>888.8'

888 </code>88booo<code>888'</code>888'

o888o <code>Y8bood8P' </code>8'`8'

--------------------------------------------------------------------------------------

#####################Sid3^effects aKa HaRi##################################

#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]

#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR

#ShouTZ:kedar,dec0d3r,41.w4r10r

#spl shoutz:LiquidWorm,gunslinger_ :D

#Catch us at www.andhrahackers.com or www.teamicw.in

############################################################################

Description :

Simple Ads manager.

Registred user can place a classified ad with description, date , comments, photos and custom fields. Administrator manages the categories of classified ads,

cutomizes fields in categories, validates the ads. The user receives an email after ad creation and after admin validation. User can modify its ad from the

fronted.

Front-end shows a view with ad details (2 template views possible), vendor email contact, and photos.

This component has been developped for the yacht club of french navy whose members may sell their boat.

Contact me if you find something wrong on the component to the email address ajulou at yahoo.fr or if you have translated the component in another language

Module is able to view random or lasted ads

############################################################################

Xploit : Upload Vulnerability

STEP 1 : Register first :)

STEP 2 : Goto "Submit an ad"option.

STEP 3 : The attacker can uploada shell in the ITEM DESCRIPTION section and your shell gets executed :P

STEP 4 : Check your ad now in the particular category and find your shell :)

submit your ad :

DEMO URL :

http://server/index.php?option=com_annonces&view=edit&Itemid=1

Once uploaded you can check your ad :P

############################################################################

#spl thks: exploit-db team

#Sid3^effects