Joomla VirtueMart Google Base Component "mosConfig_absolute_path" File Inclusion

SECUNIA ADVISORY ID:
SA32533

VERIFY ADVISORY:
http://secunia.com/advisories/32533/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
VirtueMart Google Base 1.x (component for Joomla)
http://secunia.com/advisories/product/20405/

DESCRIPTION:
NoGe has discovered a vulnerability in the VirtueMart Google Base
component for Joomla, which can be exploited by malicious people to
compromise a vulnerable system

Input passed to the "mosConfig_absolute_path" parameter in
administrator/components/com_googlebase/admin.googlebase.php is not
properly verified before being used to include files. This can be
exploited to include arbitrary files from local or external
resources.

This vulnerability is confirmed in VirtueMart Google Base version
1.3. Other versions may also be affected.

SOLUTION:
Edit the source code to ensure that input is properly verified.

PROVIDED AND/OR DISCOVERED BY:
NoGe

ORIGINAL ADVISORY:
http://milw0rm.com/exploits/6975