2088 matches found
CVE-2007-4505
The CVE-2007-4505 entry describes a SQL injection in Mambo’s RemoSitory component (com_remository) within index.php, exploitable via the cat parameter in a selectcat action to execute arbitrary SQL. Affected software is Mambo with the RemoSitory component; the root cause is unsanitized/crafted in...
CVE-2007-4505
SQL injection vulnerability in index.php in the RemoSitory component comremository for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...
CVE-2007-4505: Undefined Security Weakness
SQL injection vulnerability in index.php in the RemoSitory component comremository for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...
Mambo Component RemoSitory (cat) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Mambo Component RemoSitory cat Remote SQL Injection Vulnerability =================================================================== Title : Mambo Component RemoSitory ca...
Mambo Component Remository - cat SQL Injection
Mambo Component Remository - cat SQL Injection Title : Mambo Component RemoSitory cat Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.remository.com/ $$ : Free Dork : inurl:func=selectcat + comremository // Result:43.400 DorkEx :...
Mambo Component Remository - 'cat' SQL Injection
Title : Mambo Component RemoSitory cat Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.remository.com/ $$ : Free Dork : inurl:func=selectcat + comremository // Result:43.400 DorkEx :...
Joomla Component SimpleFAQ V2.11 - Remote SQL Injection
Joomla Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" joomla exploit...
CVE-2007-4456
SQL injection vulnerability in index.php in the SimpleFAQ comsimplefaq 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in Joomla! in addition to Mam...
CVE-2007-4456
The CVE-2007-4456 entry concerns the SimpleFAQ component (com_simplefaq) used with Mambo and Joomla!. Affected versions include 2.11 and reportedly 2.40, with the vulnerability located in the index.php (and related showAnswers path for the Joomla!/Mambo port) where the aid parameter is unsafely u...
Mambo Component SimpleFAQ V2.11 - Remote SQL Injection
Mambo Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" exploit;...
simplefaq-sql.txt
Mambo Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" exploit;...
CVE-2007-4456: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the SimpleFAQ comsimplefaq 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in Joomla! in addition to Mam...
Mambo Component SimpleFAQ 2.11 - SQL Injection
Mambo Component SimpleFAQ 2.11 - SQL Injection Mambo Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" exploit;...
Mambo Component SimpleFAQ 2.11 Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Mambo Component SimpleFAQ 2.11 Remote SQL Injection Vulnerability ================================================================= Mambo Component SimpleFAQ V2.11 - Remote...
Mambo Component SimpleFAQ 2.11 - SQL Injection
Mambo Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" exploit;...
mambobm.rfi.txt
Application : Bookmarks - mambo Component URL : http://mamboxchange.com/frs/download.php/4274/MOSComBookmarks25-Finala.zip Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/combookmarks/bookmarksexport.php on line 22,27,29 $requireonce...
Session fixation
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-4203
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter...
CVE-2007-4203
CVE-2007-4203 describes a session-fixation vulnerability in Mambo 4.6.2 CMS. The issue allows remote attackers to hijack Web sessions by manipulating the Cookie parameter. The provided documents identify the affected product/version and the basic attack concept but do not specify root cause code ...