Joomla Component com_recruitmentmanager Upload Vulnerability
Posted on 07 June 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Joomla Component com_recruitmentmanager Upload Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>============================================================ Joomla Component com_recruitmentmanager Upload Vulnerability ============================================================ # Title:Joomla Component com_recruitmentmanager Upload Vulnerability # Author: Sid3^effects # Published: 2010-06-07 # email:shell_c99@yahoo.com # version:1.5.6 Stable Update 1 # vendor url : http://recruitment.focusdev.co.uk/ # google dork : inurl:com_recruitmentmanager ############################################################################ #SPL THKS : inj3ct0r T3aM# #####################Sid3^effects aKa HaRi################################## #Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors] #Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR #ShouTZ:kedar,dec0d3r,41.w4r10r #spl shoutz:LiquidWorm,gunslinger_ :D #Catch us at www.andhrahackers.com or www.teamicw.in ############################################################################ Description : A component which allows a Recruitment Agency to advertise vacancies, accept client/employer and candidate registrations, CV submissions, etc. The component front page provides a Vacancy/Job Search form, top 5 / featured vacancies, job details display and job application. (With CV submission.) Candidates can apply for vacancies, track interviews, etc. Clients can change their company details, submit new vacancies and view their previously submitted vacancies via the site frontend. Partners can view the current vacancies and refer new Clients and Candidates to the agency. It has been developed in such a way that it can be used in any country. It is Joom!fish 2 compatible too! A full set of UK Areas (countries and counties), US and Australian states is included and can be installed in seconds. A set of example sectors and rate bands is also included and can also be installed in seconds. The backend admin allows the administrator to manage clients, vacancies, candidates, applications, interviews, areas, sectors, roles, partners and rate bands. The look and feel of the component can be managed via the CSS Admin page. There is also a reports area where CSV and XML files of jobs and candidates can be generated. There are also modules to show the featured jobs, latest jobs, candidates and clients/employers, and also an area/sector search and candidate search module. ############################################################################ Xploit : Upload Vulnerability # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-06-07]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>
