Joomla! Component User Status - Local File Inclusion







Become a Certified Penetration Tester

Enroll in Penetration Testing with Kali Linux and pass the exam to become an Offensive Security Certified Professional (OSCP). All new content for 2020.


Joomla Component User Status Local File Inclusion

Author		: Chip D3 Bi0s
Group		: LatinHackTeam
Email & msn	:
Date		: 31 March 2010
Critical Lvl	: Moderate
Impact		: Exposure of sensitive information
Where		: From Remote

Affected software description:

Application	: User Status
version		: 1.21.16 
Developer	: Mo Kelly
License		: GPL            type  : Commercial
Price		: 10.00 USD
Date Added	: 27 March 2010
Download	:

Description     :

The component back end allows the entry of locations. Also assigning users to a location is done in the back end.
Users that are not assigned a location do not show up in the User Status Screen.

After creating locations and assigning users you may view their status from the front end.
Create a menu selection with user User Status component.

There is a separate module to allow users to update their status.

Another module, "Refresh Page" makes sure that the user status screen accurately reflects users status.

A User's status must be updated to change, it will not expire with the user session.

file error	: components/com_userstatus/userstatus.php

how to exploit


[!] Produced in South America