Description
Exploit for php platform in category web applications
{"id": "1337DAY-ID-12934", "type": "zdt", "bulletinFamily": "exploit", "title": "Joomla Component com_hbsuserregistration Upload Vulnerability ", "description": "Exploit for php platform in category web applications", "published": "2010-06-25T00:00:00", "modified": "2010-06-25T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://0day.today/exploit/description/12934", "reporter": "Sid3^effects", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2018-03-20T07:15:05", "viewCount": 10, "enchantments": {"score": {"value": 0.0, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.0}, "sourceHref": "https://0day.today/exploit/12934", "sourceData": "=============================================================\r\nJoomla Component com_hbsuserregistration Upload Vulnerability \r\n=============================================================\r\n\r\n\r\n1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0\r\n0 _ __ __ __ 1\r\n1 /' \\ __ /'__`\\ /\\ \\__ /'__`\\ 0\r\n0 /\\_, \\ ___ /\\_\\/\\_\\ \\ \\ ___\\ \\ ,_\\/\\ \\/\\ \\ _ ___ 1\r\n1 \\/_/\\ \\ /' _ `\\ \\/\\ \\/_/_\\_<_ /'___\\ \\ \\/\\ \\ \\ \\ \\/\\`'__\\ 0\r\n0 \\ \\ \\/\\ \\/\\ \\ \\ \\ \\/\\ \\ \\ \\/\\ \\__/\\ \\ \\_\\ \\ \\_\\ \\ \\ \\/ 1\r\n1 \\ \\_\\ \\_\\ \\_\\_\\ \\ \\ \\____/\\ \\____\\\\ \\__\\\\ \\____/\\ \\_\\ 0\r\n0 \\/_/\\/_/\\/_/\\ \\_\\ \\/___/ \\/____/ \\/__/ \\/___/ \\/_/ 1\r\n1 \\ \\____/ >> Exploit database separated by exploit 0\r\n0 \\/___/ type (local, remote, DoS, etc.) 1\r\n1 1\r\n0 [+] Site : Inj3ct0r.com 0\r\n1 [+] Support e-mail : submit[at]inj3ct0r.com 1\r\n0 0\r\n1 ########################################## 1\r\n0 I'm Sid3^effects member from Inj3ct0r Team 1\r\n1 ########################################## 0\r\n0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1\r\n\r\nName : com_hbsuserregistration Upload Vulnerability\r\nDate : june, 24 2010\r\nCritical Level : HIGH\r\nVendor Url : http://demo.joomlahbs.com/\r\nGoogle Dork: inurl:com_hbsuserregistration\r\nAuthor : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>\r\nspecial thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_\r\ngreetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz\r\n#######################################################################################################\r\nDescription:\r\n Using this component you can start your own CMS Hotel Booking Reservation System.\r\nJoomla HBS Package component is suitable for one hotel Owner - Company anywhere around the world.\r\n\r\n#######################################################################################################\r\nXploit:UPload Vulnerability\r\n\r\nStep 1: Register as a user\r\n\r\nStep 2: Goto to ADD HOTELS\r\n\r\nStep 3. Upload the shell with .jpg extension\r\n\r\nStep 4: Now check your shell\r\n\r\nDEMO URL\r\n http://demo.joomlahbs.com/p3/index.php?option=com_hbsuserregistration&Itemid=66\r\n \r\n To check your shell :\r\n DEMO URL:http://demo.joomlahbs.com/p3/en/component/roomtypes/show.html\r\n\r\nThis component is also vulnerable to sqli\r\n###############################################################################################################\r\n# 0day no more\r\n# Sid3^effects \r\n\r\n\n\n# 0day.today [2018-03-20] #", "_state": {"dependencies": 1645307822, "score": 1659766679, "epss": 1678811959}}
{}