Iran Sites Open 2 Joomla -K-CMS Hacking
Iran Sites Open 2 Joomla -K-CMS Hacking
gAtO wAs – in the kitty box scratching and found some sites in Iran that have the same problem that Syria has. Outdated older Content Management systems like Joomla and KCMS_1.0[2] and many other sites have Microsoft Visual Studio.NET 7.0. These require more research as to vulnerabilities but we are working on that. But gAtO found you guessed it Joomla 1.5 CMS all over the place. The same vulnerabilities that Syria has they have
This is easy to do with any browser do a search on any search engine “site:.gov.ir” and you will get a list of all the .gov.ir sites everywhere. Now remember with a translate button(on your browser) you can read these site in any language you want. The other trick is once you get to any site on your browser just go to >>Edit>>Source Code. and lot’s of sites will tell you the content creation: All sites in any language the HTML is always in english.
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management” />
If your smart and are doing this in a government site I would remove this information. Now besides Joomla 1.5 gAtO found lots of sites with KCMS_1.0[2] and you guessed it again they are older versions and have vulnerabilities. So now gAtO will publish this list and update it as we find more and more vulnerabilities. Why doe gATo do this. It my way of showing the world that anyone can help, anyone with any talent can contribute to making this world a better world. I hope this informtion helps someone to be free- gAtO oUt.
Some site have this warning be careful :This site may harm your computer.
Research Notes:
IRAN site:.gov.ir
http://xforce.iss.net/xforce/xfdb/33437 Apr 4, 2007 – CVE-2007-2106: Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.x allows remote attackers to ..
K-CMS (Kai Content Management System) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request to the index.php script using the current_theme parameter to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server.
Many of Irans site use ArPortal 7.1.2 while many others us Microsoft Visual Studio.NET 7.0
<meta name=”generator” content=”Expans! 1.5 – Open Source Content Management
[1] security tips for Joomla Websites http://www.itoctopus.com/10-security-tips-for-your-joomla-website
<META NAME=”GENERATOR” CONTENT=”ArianaPortal 7.1.2″>
[2] <meta name=”generator” content=”KCMS 1.0″ />
K-CMS (Kai Content Management System) index.php file include
<meta name=”generator” content=”KCMS 1.0” />
http://www.abhar.gov.ir/index.php?limitstart=63
<meta name=”generator” content=“Joomla! 1.5 – Open Source Content Management. Developed By MamboLearn.com” />
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management. Developed By MamboLearn.com” />
pishva.gov.ir
<meta name=”generator” content=”Expans! 1.5 – Open Source Content Management
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management. Developed By MamboLearn.com” />
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management” />
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management. Developed By Mambolearn.com” />
http://easabt.gov.ir/protocol/
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management. Developed By Navid Iranian Co. Ltd” />
Saman Information Structure
http://www.sadra-ntoir.gov.ir/
<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management” />
News – ????? ??? ????? ? ????? ???
sabtyazd.gov.ir/index.php?option=com_newsfeeds…id…
This site may harm your computer.
Joomla 1.5.15 Released. The Joomla Project is pleased to announce the immediate availability of Joomla 2.5.0. This is a security release. Version 2.5.0 is is the …
www.khodabandeh.gov.ir/ - Translate this page
Copyright © 2009 — Webdesign aus Tirol – All Rights Reserved. Template Demo Joomla 1.5 Template by pc-didi.. Translate By : Meisam Heidarzadeh | hotfa.ir.
www.sabtyazd.gov.ir/index.php?… - Translate this page
This site may harm your computer.
… C:\Inetpub\vhosts\sabtyazd.gov.ir\httpdocs\libraries\joomla\session\session. php … %PDF-1.5 3 0 obj < > endobj 4 0 obj < > stream x?U?k A ?? ?
?Zz s …






The cyber tensions in the middle east have escalated with America and Israel joining together and going after Iran and Syria in cyberspace with probes and attacks. Iran is currently building a cyber fortress to keep everyone in and keep everyone else out. Now you add the Saudi’s our friends going after Israel our other friends. 
