Yes. Basically, when tmpl=component is in the request it results in a blank
grey page and the authorisation error is not present. When tmpl=component
is taken out it uses the website's default template and contains the error
you'd normally expect, "You are not authorised to view this resource", but
as a 302 Found response instead of a 200. My guess is either the component
template is disabled or some combination of plugins makes the component
template unreliable.

I'll confirm with the site owner (a friend) that it can be used for
testing. In the mean time, pcap emailed.


On Thu, Sep 5, 2013 at 10:49 AM, Juan Vazquez <notifications@github.com>wrote:

> In modules/exploits/unix/webapp/joomla_media_upload_exec.rb:
>
> > @@ -182,7 +181,7 @@ def exploit
> >  		print_status("#{peer} - Checking Access to Media Component...")
> >  		res = get_upload_form
> >
> > -		if res and res.code == 200 and res.headers['Set-Cookie'] and res.body =~ /You are not authorised to view this resource/
> > +		if res and (res.code == 200 or res.code == 302) and res.headers['Set-Cookie'] and res.body =~ /You are not authorised to view this resource/
>
> Are you seeing a 302 redirect with the body including "You are not
> authorised to view this resource" :?
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/rapid7/metasploit-framework/pull/2328/files#r6185220>
> .
>