Joomla Flash Fun Local File Inclusion

========================================================= Joomla Component comjoomlaflashfun LFI Vulnerability ========================================================= +Title : Joomla Component comjoomlaflashfun LFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...

CVE-2007-4955

The CVE-2007-4955 entry describes a PHP remote file inclusion vulnerability in the Joomla! Flash Fun! extension (com_joomlaflashfun) version 1.0. The issue allows an attacker to remotely execute arbitrary PHP code by supplying a URL in the mosConfig_live_site parameter within admin.joomlaflashfun...

joomlaflash-rfi.txt

Joomla Flash Fun! Component RFI Bug in : /administrator/components/comjoomlaflashfun/admin.joomlaflashfun.php?mosConfiglivesite= Variable : $mosConfiglivesite Dork: "comjoomlaflashfun" Example:...