################################################################### # Exploit Title : arab nationalist party vuln # Author [ Discovered By ] : At0m - Turkish Defacer and Bug Resarcher # Tested On : Windows and Linux # host : http://www.baath-party.org/ # no firewall detected # joomla version : 1.7 # admin login : http://www.baath-party.org/administrator/ [+] Core Joomla Vulnerability [++] Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities EDB : https://www.exploit-db.com/exploits/36176/ Joomla! 'redirect.php' SQL Injection Vulnerability EDB : https://www.exploit-db.com/exploits/36913/ Joomla! 1.5 < 3.4.5 - Object Injection Remote Command Execution CVE : CVE-2015-8562 EDB : https://www.exploit-db.com/exploits/38977/ Joomla! 1.0 < 3.4.5 - Object Injection 'x-forwarded-for' Header Remote Code Execution CVE : CVE-2015-8562 , CVE-2015-8566 EDB : https://www.exploit-db.com/exploits/39033/ Joomla! Core Remote Privilege Escalation Vulnerability CVE : CVE-2016-9838 EDB : https://www.exploit-db.com/exploits/41157/ Joomla! 1.6/1.7/2.5 privilege escalation vulnerability CVE : CVE-2012-1563 EDB : https://www.exploit-db.com/exploits/41156/ PHPMailer Remote Code Execution Vulnerability CVE : CVE-2016-10033 https://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection https://github.com/opsxcq/exploit-CVE-2016-10033 EDB : https://www.exploit-db.com/exploits/40969/ PPHPMailer Incomplete Fix Remote Code Execution Vulnerability CVE : CVE-2016-10045 https://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection EDB : https://www.exploit-db.com/exploits/40969/ -------------------------------------------------- Interesting path found from robots.txt http://www.baath-party.org/joomla/administrator/ http://www.baath-party.org/administrator/ http://www.baath-party.org/cache/ http://www.baath-party.org/components/ http://www.baath-party.org/images/ http://www.baath-party.org/includes/ http://www.baath-party.org/installation/ http://www.baath-party.org/language/ http://www.baath-party.org/libraries/ http://www.baath-party.org/logs/ http://www.baath-party.org/media/ http://www.baath-party.org/modules/ http://www.baath-party.org/plugins/ http://www.baath-party.org/templates/ http://www.baath-party.org/tmp/ -------------------------------------------- #[+] https://en.wikipedia.org/wiki/Arab_Socialist_Ba%27ath_Party_%E2%80%93_Syria_Region - official website # Thanks to m3t4l