mambo-xssxsrf.txt

WwW.BugReport.ir AmnPardaz Security Research Team Title: Mambo Vulnerabilities Vendor: http://mamboserver.com Bugs: Path Disclosure, XSS , XSRF, DOS Vulnerable Version:4.6.3 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: Mambo is an, open...

Mambo Module MOStlyCE 2.4 Image Manager Utility - Arbitrary File Upload

Mambo Module MOStlyCE 2.4 Image Manager Utility - Arbitrary File Upload source: https://www.securityfocus.com/bid/27472/info The MOStlyCE module for Mambo is prone to an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this...

Code injection

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

CVE-2008-0261

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

CVE-2008-0261

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

CVE-2008-0261

CVE-2008-0261 affects Mambo CMS versions 4.5.x and 4.6.x. A vulnerability in the search component/module can allow remote attackers to cause a denial of service (query flood). Exploitation vectors are not specified in the provided documents. No remediation details are given in the supplied sources.

CVE-2008-0261: Undefined Security Weakness

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

CVE-2007-6455

CVE-2007-6455 involves multiple cross-site scripting (XSS) vulnerabilities in index.php of Mambo 4.6.2. The issues allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a com_frontpage option and (2) the option parameter. Documents provided identify the aff...

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

CVE-2007-6455: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

Mambo 4.6.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

Mambo 4.6.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Mambo 4.6.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Multiple xss in mambo 4.6.2

Application : Mambo v4.6.2 Author : Beenu Arora website : www.darkc0de.com Email ; [email protected] Website: http://sourceforge.net/projects/mambo/ --------------- |Multiple XSS | --------------- a.Vulnerable URL: http://localhost/mambo/index.php?option=comfrontpage&Itemid= Parameter = Item...

mambo462-xss.txt

Application : Mambo v4.6.2 Author : Beenu Arora website : www.darkc0de.com Email ; [email protected] Website: http://sourceforge.net/projects/mambo/ --------------- |Multiple XSS | --------------- a.Vulnerable URL: http://localhost/mambo/index.php?option=comfrontpage&Itemid= Parameter = Item...

CVE-2007-6362

SQL injection vulnerability in index.php in the RSGallery comrsgallery 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action...

Sql injection

SQL injection vulnerability in index.php in the RSGallery comrsgallery 2.0 beta 5 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an inline page action...

CVE-2007-6362

Summary: CVE-2007-6362 is a SQL injection in the RSGallery component (com_rsgallery) for Mambo/Joomla! up to 2.0 beta5. Vulnerable component: index.php handling inline page actions. Root cause: SQL commands are injectable via the catid parameter. Impact: Remote attackers could potentially execute...