Joomla! Component com_osproperty 2.0.2 - Unrestricted Arbitrary File Upload

Author: D4NB4R
type: webapps
platform: php
port: 
date_added: 2012-07-14 
date_updated: 2017-02-19 
verified: 0 
codes: OSVDB-83805 
tags: 
aliases:  
screenshot_url:  
application_url: 

_______________________________________________________________________________________

 Exploit Title: Joomla com_osproperty Unrestricted File Upload

 Google Dork: com_osproperty

 Date: [13-07-2012]

 Author: Daniel Barragan "D4NB4R"

 Twitter: @D4NB4R

 site: http://www.insecurityperu.org/  &  http://poisonsecurity.wordpress.com/

 Vendor: Ossolution Team http://extensions.joomla.org/

 Version: 2.0.2 (last update on Jul 12, 2012)

 License: Commercial $ 28.86us

 Tested on: [Linux(arch)-Windows(7ultimate)]


1.  Go to this route
    Ingrese a esta ruta

   http://site/component/osproperty/?task=agent_register


2.  Complete the form, raising the shell.php instead of your photo
    Complete el formulario, subiendo la shell.php en lugar de su foto


3.  Locate your file in the root /osproperty/agent/
    Busque su archivo en la raiz /osproperty/agent/

    http://site/images/osproperty/agent/randomid_yourshell.php


Help:  This path can help you find your web shell in case you need it
       Este path le puede ayudar a encontrar su web shell en caso q lo necesite

           component/osproperty/?task=agent_default


Im not responsible for which is given
No me hago responsable del uso que se le de
_______________________________________________________________________________________
Daniel Barragan "D4NB4R"  2012