joomla - plugin l.f.d exploit (0day)

script and video :p:p:p *** Hidden text: You do not have sufficient rights to view the hidden text. Visit the forum thread! ***

##HEADLINE Joomla <= (Shape 5 MP3 Player 2.0) Local File Disclosure Exploit (0day) ##HEADLINE zeroday 13 Aralık 2015 itibariyle <?php $path = base64_decode($_REQUEST[’fileurl’]); $base = basename($path); $path1 = str_replace(’ ’,’%20’,$path); header(’Content-Description: File Transfer’)...