Joomla <=2.5.8,<=3.0.2 remote tcp connections opener

Joomla core plugin 'highlight' unserializes not trusted input. Plugin is enabled by default in standard joomla installation. This proof of concept exploit uses JStream joomla class to make target opens remote tcp connections to custom address, therefore multiple vulnerable joomla instances can be...