Joomla 1.5.12 TinyBrowser File Upload Code Execution
This module exploits a vulnerability in the TinyMCE/tinybrowser plugin. This plugin is not secured in version 1.5.12 of joomla and allows the upload of files on the remote server. By renaming the uploaded file this vulnerability can be used to upload/execute code on the affected system.
Module Name
exploit/unix/webapp/joomla_tinybrowser
Authors
- spinbad <spinbad.security [at] googlemail.com>
References
Targets
- Automatic
Platforms
- php
Architectures
- php
Reliability
Development
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use exploit/unix/webapp/joomla_tinybrowser
msf exploit(joomla_tinybrowser) > show targets
...targets...
msf exploit(joomla_tinybrowser) > set TARGET <target-id>
msf exploit(joomla_tinybrowser) > show options
...show and set options...
msf exploit(joomla_tinybrowser) > exploit