CVE-2005-4319

CVE-2005-4319 : Limbo CMS (PHP)

CVE-2005-4320

CVE-2005-4320 affects Limbo CMS versions 1.0.4.2 and earlier. The vulnerability allows remote attackers to obtain the installation path by requesting one of three files—doc.inc.php, element.inc.php, or node.inc.php—causing a path disclosure in an error message. OpenVAS/NASL details corroborate th...

CVE-2005-4320

Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to 1 doc.inc.php, 2 element.inc.php, and 3 node.inc.php, which leaks the path in an error message...

CVE-2005-4318

CVE-2005-4318 is a SQL injection vulnerability in Limbo CMS 1.0.4.2 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands through the _SERVER[REMOTE_ADDR] parameter, which alters the underlying $_SERVER variable when register_globals is off. Affected software is Limbo CM...

CVE-2005-4317

Limbo CMS (versions up to 1.0.4.2) is affected by multiple flaws. When register_globals is off and a MySQL backend is used, improper sanitization of _SERVER[REMOTE_ADDR] enables SQL injection. The same parameter can also enable cross-site scripting in the Stats module. Additionally, index2.php pe...

CVE-2005-4317

Limbo CMS 1.0.4.2 and earlier, with registerglobals off, does not protect the $SERVER variable from external modification, which allows remote attackers to use the SERVERREMOTEADDR parameter to 1 conduct cross-site scripting XSS attacks in the stats module or 2 execute arbitrary code via an eval...

CVE-2005-4318

SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with registerglobals off, allows remote attackers to execute arbitrary SQL commands via the SERVERREMOTEADDR parameter, which modifies the underlying $SERVER variable...

CVE-2005-4319

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter...

CVE-2005-4319: Undefined Security Weakness

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbitrary PHP files via ".." sequences in the option parameter...

CVE-2005-4317: Undefined Security Weakness

Limbo CMS 1.0.4.2 and earlier, with registerglobals off, does not protect the $SERVER variable from external modification, which allows remote attackers to use the SERVERREMOTEADDR parameter to 1 conduct cross-site scripting XSS attacks in the stats module or 2 execute arbitrary code via an eval...

CVE-2005-4320: Exposure of Sensitive Information to an Unauthorized Actor

Limbo CMS 1.0.4.2 and earlier allows remote attackers to obtain the installation path of the application via a direct request to 1 doc.inc.php, 2 element.inc.php, and 3 node.inc.php, which leaks the path in an error message...

CVE-2005-4318: Undefined Security Weakness

SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with registerglobals off, allows remote attackers to execute arbitrary SQL commands via the SERVERREMOTEADDR parameter, which modifies the underlying $SERVER variable...

LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution

LIMBO CMS = v1.0.4.2 SERVER array overwrite / blind SQL injection / cross site scripting / local file inclusion / path disclosure / remote code/commands execution software: site: http://www.limbo-cms.com/ description: "Putting it in short Limbo is a Content Management System, which allows you to...

limbo1042_xpl.txt

LIMBO CMS '%20INTO%20DUMPFILE%20'fullapplicationpathshell.php'%20FROM%20lmsimplestats/&option=weblinks&Itemid=999/ query becomes: SELECT id,ip,date FROM lmsimplestats WHERE id1 AND ip = '999'UNION SELECT null,'' INTO DUMPFILE 'fullapplicationpathshell.php' FROM lmsimplestats/' note: this works...

Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks. Limbo CMS versions 1.0.4.2 and prior are affected by these...

Limbo CMS 1.0.4.2 - option Traversal Arbitrary File Access

Limbo CMS 1.0.4.2 - option Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks. Limbo...

Limbo 1.0.4.2 - _SERVER[REMOTE_ADDR] Remote Command Execution

Limbo 1.0.4.2 - SERVERREMOTEADDR Remote Command Execution this works wtih registerglobals off & regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Humble words and increased preparations are signs that the enemy is about to advance. Viole...

Limbo CMS 1.0.4.2 - 'index.php?_SERVER[REMOTE_ADDR]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks. Limbo CMS versions 1.0.4.2 and prior are affected by these...

Limbo <= 1.0.4.2 _SERVER[REMOTE_ADDR] Overwrite Remote Exploit

No description provided by source. ?php ---limbo1042evalxpl.php 16.03 14/12/2005 Limbo = 1.0.4.2 SERVERREMOTEADDR overwrite/ remote cmmnds xctn coded by rgod site: http://rgod.altervista.org - this works wtih registerglobals off & regardless of magicquotesgpc settings usage: launch from Apache,...

Limbo CMS 1.0.4.2 - index.php?_SERVER[REMOTE_ADDR] Cross-Site Scripting

Limbo CMS 1.0.4.2 - index.php?SERVERREMOTEADDR Cross-Site Scripting source: https://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include...