MOSMedia Module for Mambo/Joomla media.divs.php mosConfig_absolute_path Variable Remote File Inclusion

2007-04-11T00:00:00
ID OSVDB:37434
Type osvdb
Reporter OSVDB
Modified 2007-04-11T00:00:00

Description

Manual Testing Notes

/components/com_mosmedia/media.divs.php?mosConfig_absolute_path=r57.txt?

References:

Related OSVDB ID: 37433 Generic Exploit URL: http://www.milw0rm.com/exploits/3714 FrSIRT Advisory: ADV-2007-1357 CVE-2007-2043 Bugtraq ID: 23432