2088 matches found
Mambo Component com_yanc 1.4 Beta - 'id' SQL Injection
------------------------------ ------------------------------- Mambo comyanc v1.4 beta id Blind Remote SQL Injection Vuln ------------------------------------------------------------- Bulan: Cyber-Security ------------------------------------------------------------- Exploit:...
Information disclosure
MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2557
MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7202
The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors...
CVE-2006-7202
The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors...
CVE-2007-2557
MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2557
The CVE-2007-2557 entry concerns MOStlyDB Admin in Mambo 4.6.1, where privileges are not properly checked. The root cause is insufficient privilege validation in the MOStlyDB Admin component, allowing remote authenticated administrators to cause an unknown impact via unspecified vectors. The avai...
CVE-2006-7202
The vulnerability CVE-2006-7202 affects Mambo 4.6.1: the dofreePDF function in includes/pdf.php does not properly enforce access rights for database content, allowing remote attackers to read certain content via unspecified vectors. This is due to an insufficient access check in the PDF generatio...
CVE-2006-7202: Undefined Security Weakness
The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors...
CVE-2007-2557: Undefined Security Weakness
MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Mambo < 4.6.2 includes/pdf.php dofreePDF Function Authentication Bypass
Binary data 3981.prm...
CVE-2007-2317
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...
CVE-2007-2317: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...
Remote file inclusion
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
CVE-2007-2196
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
CVE-2007-2196
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
CVE-2007-2196
CVE-2007-2196 targets Jambook (com_Jambook) version 1.0 beta7 for Mambo/Joomla!. It describes a PHP remote file inclusion in jambook.php triggered by a URL value for mosConfig_absolute_path, allowing remote code execution. The issue is disputed by third parties who say jambook.php protects agains...
CVE-2007-2196: Undefined Security Weakness
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
com_mosmedia for Mambo & Jommla <= Remote File Include Vulnerability
commosmedia for Mambo & Jommla = Remote File Include Vulnerability - Exloit : - /components/commosmedia/media.tab.php?mosConfigabsolutepath=r57.txt? - /components/commosmedia/media.divs.php?mosConfigabsolutepath=r57.txt? - Page Script : -...
Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities
======================================================= Tosmo Mambo = 4.0.12 absolutepath Multiple RFI Vulnerabilities ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepage:...