Find an inject 0day

<head>
<style css="text/css">
body {background-color: black}
</style>
<meta name="keywords" content="Tool Group x3">
<meta name="description" content="Tool Group x3">
<title>Tool Group x3</title>
</head>

<body style="background-color: #4D4D4D">
<html>

    <p align="center"><font face="Consolas" size="2" color="red">
        <br>
        </font><b><font face="Consolas" size="2">
        \ Color Options /</font></b></p>
        <center>
            <table algin="center" border="1" width="36%" style="font-family: Consolas; border: 1px solid #C0C0C0; " >
                    <tr>
                            <td align="center">
                            <p align="center"><b><font size="2">Joomla</font></b></td>
                            <td align="center">
                            <p align="center"><b><font face="Consolas" size="2">Joomla</font></b></td>
                    </tr>
                    <tr>
                            <td height="24" align="center">
                            <p align="center"><font size="2" color="#00FF00"><b>
                            Green infected</b></font></td>
                            <td height="24" align="center">
                            <p align="center"><b><font size="2" color="#FFFFFF">
                            White uninfected</font></b></td>
                    </tr>
            </table>
            </center>
            <font color=red>

<div style="text-align: left;">
    &nbsp;</div></font>
<div style="text-align: left;">
    <font color=red><b><font color="FF0000" size="4">&nbsp;</font></b></div>
<html>
<body style="background-color: #4D4D4D">

<p>&nbsp;</p>

</body>
</html>

<?php

set_time_limit(0);
function checke($url){
    $login = $url;
    $ch = curl_init();
    curl_setopt($ch,CURLOPT_URL,$login);
    curl_setopt($ch,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1');
    curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
    $result = curl_exec($ch);
    curl_close($ch);
    return $result;
    }
function scan($ip)
{
    $dork = "/index.php?option=com";
    $num = 1;
    for($i=1;$i<=10;$i++)
    {
        $text = file_get_contents("http://www.bing.com/search?q=ip%3a{$ip}+{$dork}&go=&qs=ds&filt=all&first={$num}");
        $num = $num + 10;
        preg_match_all('#(<div class="sb_tlst">.*<h3>.*<a href="(.*)".*>(.*)</a>.*</h3>.*</div>)#siU',$text,$m);
        foreach($m[2] as $s)
        {
            $array[] = check($s);
            $dd = array_unique($array);
        }
    }
    return $dd;
}
function check($url)
{
    $url = explode("/index.php?option=com",$url);
    $url = str_replace("www.","",$url);
    $url = str_replace("http://","http://www.",$url);
    return $url[0]."/";
}
if($_POST['ip'])
{
    foreach(scan($_POST['ip']) as $url)
    {
        $dork = "index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=9d09f693c63c1988a9f8a564e0da7743";
        $text = checke($url.$dork);
        if(eregi('{"result":null,"error":"No function call specified!"}',$text) or eregi('{"result":null,"error":"Cannot call function . Function not registered!"}',$text))
        {
            echo "<a href='{$url}{$dork}'><font color=#00FF00><b>{$url}</b></font></a><br />";
            flush();
        }else{
            echo "<a href='{$url}'><font color=white><b>{$url}</b></font></a><br />";
            flush();
        }
    }
}else{



    echo "<font color=black><b>please enter ip address :</b></font></a><br /><form action='?' method='POST'><input name='ip' type='text' ><br><input type='submit' value='check'></form>";


}
?></font><p>&nbsp;</p>
<p><b><kbd><font face="Tahoma">These tool to develop ideas and not attack or penetration, we are here to develop the ethical hacker</font></kbd></b></p>
<p><b><kbd><font face="Tahoma">Group x3 : Lov3rDNS , Shark Hidden , Mr.Dm4r</font></kbd></b></p>