0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Joomla com_breezingforms Arbitrary File Upload Vulnerability
[###################### # Exploit Title : Joomla com_breezingforms Arbitrary File Upload # Exploit Author : xBADGIRL21 # Dork : inurl:index.php?option=com_breezingforms # Software link : https://crosstec.org/en/downloads/breezingforms-for-joomla.html # Vendor Homepage : https://crosstec.org/en/ # version : 1.8.x # Tested on: [ BACK BOX ] # skype:xbadgirl21 # Date: 01/08/2016 # video Proof : https://www.youtube.com/watch?v=qat5nAQ8H80 ###################### # [+] FILE UPLOAD : ###################### ###################### # [+] DESCRIPTION : ###################### # [+] BreezingForms is the only state of the art form builder for Joomla!® that combines # [+] modern techniques with enterprise features. From great looking simple forms up to complex form applications # [+] -- almost everything is possible! # [+] and an Shell Upload has been Detected in this component ###################### # [+] PoC : ###################### # 1.- SELECT A WEBSITE FROM THE DORK ABOVE # 2.- http://localhost/joomla/ # 3.- check this Directory if you have Access to it : media/breezingforms/uploads/ # 4.- fill the fields # 5.- Upload your Shell like :shell.php.Txt or Image to Upload Field # 6.- Shell Directory : media/breezingforms/uploads/yourfile.txt or the extension uploaded # Ex : http://www.sps-training.com/media/breezingforms/uploads/a.txt ###################### # [+] Live Demo: ###################### # http://www.sps-training.com/index.php?option=com_breezingforms&view=form&Itemid=248 #http://www.alaeu.com/index.php?option=com_breezingforms&tmpl=component&Itemid=145&ff_contentid=24&ff_form=1&ff_applic=plg_facileforms&format=html&ff_frame=1&lang=en #http://www.westernerdays.ca/index.php?option=com_breezingforms&Itemid=137&ff_form=2&ff_applic=mod_facileforms&ff_module_id=134&format=html&tmpl=component&ff_frame=1 ###################### # [+] File Path : ###################### # http://www.localhost/media/breezingforms/uploads/yourfile.txt ###################### # Discovered by : xBADGIRL21 # Greetz : All Mauritanien Hackers - NoWhere ###################### # 0day.today [2024-11-15] #