Joomla! Component com_ksadvertiser – Remote File / Bypass Upload

• Exploit Database
• 9 阅读

• 作者： D4NB4R
  日期： 2012-07-13
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/19792/

• ############################################################################
  # 
  # Exploit Title: Joomla com_KSAdvertiser Remote File & Bypass Upload Vulnerability 
  #
  # Google Dork: inurl:index.php?option=com_ksadvertiser
  #
  # Date: [12-07-2012]
  #
  # Author: Daniel Barragan "D4NB4R"
  #
  # Twitter: @D4NB4R
  #
  # site: http://www.insecurityperu.org/
  #
  # vendor Link: http://www.kiss-software.de
  # 
  # Tested on: [Linux(arch)-Windows(7ultimate)]
  #
  
  1.Some pages require the Register
  Registrese Algunas Paginas lo exigen
   
   http://site/index.php?option=com_user&view=login
  
  
  2.Go to the upload path
  Dirijase a la ruta del upload 
  
   
   http://site/index.php?option=com_ksadvertiser&Itemid=36&task=add&catid=0&lang=en
  
  
  3.Go to images and give click to upload, browse your file shell.php, and rename it to shell.php.gif
  Vaya a imagenes y dele click a upload, examine su archivo shell.php y renombrelo a shell.php.gif 
  
  4.Locate your file in the root / images/ksadvertiser/U0 -> this may vary
  Busque su archivo en la raiz /images/ksadvertiser/U0 --> esta puede variar
   
  http://site/images/ksadvertiser/U0/403.php.gif
  
   
  Im not responsible for which is given
  No me hago responsable del uso que se le de
  _______________________________________________________________________________________
  Daniel Barragan "D4NB4R"
  
  Site:http://www.exploit-db.com // http://packetstormsecurity.org // http://1337day.com/