Joomla Joomlisting Shell Upload

` ===========================================  
Joomla com_joomlisting Upload Vulnerability  
===========================================  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [+] Site : Inj3ct0r.com 0  
1 [+] Support e-mail : submit[at]inj3ct0r.com 1  
0 0  
1 ########################################## 1  
0 I'm Sid3^effects member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
Name : Joomla com_joomlisting Upload Vulnerability  
Date : june, 18 2010  
Vendor url :http://www.joomclan.com/demo/joomlistings/index.php  
Critical Level : MEDIUM   
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,gunslinger_  
greetz to :All ICW members and my friends :) luv y0 guyz   
#######################################################################################################  
Description:  
Start your very own Classified Ads website today or add classifieds functionality to your existing website using JoomListings. This component integrates with your Joomla portal and has all the tools you need to create a successful, and income-earning website. We provide you with an intuitive admin control panel from Joomla Administrator to add, modify settings and pricing packages on your site. The component can be set up to run itself through automatic email notifications, automated billing, and other valuable time-saving features.  
  
JC - JoomListings is a professionally developed classifieds component that was built with you - the site owner - in mind and to assist you in generating income from your website. Whether you are running classifieds for autos, motorcycles, bicycles, real estate, jobs, or general merchandise, JoomListings component with Joomla! is the right package for you.   
  
#######################################################################################################  
com_joomdocs suffers from Upload Vulnerability  
  
Xploit:Upload Vulnerability  
  
Step 1 : As always register as a user :P  
  
Step 2 : Select "post ad" option.  
DEMO URL :http://www.joomclan.com/demo/joomlistings/index.php?option=com_joomlistings&view=ad&layout=post&Itemid=61  
  
Step 3 : Upload your shell in upload image option as well as your description area   
  
Step 4 : Now browse your and you can own the box ;)  
  
###############################################################################################################  
# 0day no more   
# Sid3^effects   
`