165 matches found
CVE-2006-4859
Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...
CVE-2006-4860
Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...
CVE-2006-4859
Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...
CVE-2006-4860: Undefined Security Weakness
Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...
CVE-2006-4859: Undefined Security Weakness
Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...
Limbo com_fm Component sql.php classes_dir Parameter Remote File Inclusion
The remote host is running Limbo CMS, a content-management system written in PHP. The 'comfm' component of the version of Limbo installed on the remote host allows an unauthenticated, remote attacker to copy arbitrary files, possibly taken from a third-party host, into the web document directory...
Limbo Contact Component (com_contact) contact.html.php contact_attach Unrestricted File Upload
The remote host is running Limbo CMS, a content-management system written in PHP. The 'comcontact' component of the version of Limbo installed on the remote host allows an unauthenticated, remote attacker to upload arbitrary files to a known directory within the web server's document root. Provid...
Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dorks:...
Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Limbo CMS = 1.0.4.2L comcontact Remote Code Execution Exploit ================================================================= !/usr/bin/php -q -d shortopentag=on ? printr'...
Limbo CMS 1.0.4.2L - 'com_contact' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dorks: inurl:contact inurl:Itemid inurl:optio...
Limbo CMS 1.0.4.2L - com_contact Remote Code Execution
Limbo CMS 1.0.4.2L - comcontact Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site:...
Mambo com_lurm_constructor Component <= 0.6b Include Vulnerability
No description provided by source. C Y BE R - W A R R i O R T I M mambo comlurmconstructor Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: admin.lurmconstructor.php, line 2...
Sql injection
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
CVE-2006-2363 affects Limbo CMS via the weblinks option (weblinks.html.php). The vulnerability is a SQL injection in the catid parameter that can allow an unauthenticated attacker to influence database queries, potentially exposing password hashes when Limbo uses MySQL. Exploitation details and i...
Limbo weblinks.html.php catid Parameter SQL Injection
The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...
CVE-2006-2363: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Limbo CMS (option=weblinks) SQL injection exploit
pre i Limbo CMS option=weblinks sql injection exploit i Cyber-Security.ORG | Security Advisory | Security Edithor by SnoB | Turkish hacking | security! ?php if !isset$GET'host' || !isset$GET'path' || !isset$GET'id' ? Usage: ?echo htmlentities$PHPSELF??host=hostname&path=limbopath&id=userid Exempl...
Limbo CMS 1.0.4.2 - catid SQL Injection
Limbo CMS 1.0.4.2 - catid SQL Injection i Limbo CMS option=weblinks sql injection exploit i coded by Oo Usage: ?host=hostname&path=limbopath&id=userid Exemple: ?host=127.0.0.1&path=/limbo&id=1 g Google: inurl:"index2.php?option=rss" OR "powered By Limbo CMS" /",$f && pregmatch"/login/",$f echo...