CVE-2007-2043

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia commosmedia 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 media.tab.php or 2 media.divs.php...

CVE-2007-2042

The CVE describes multiple PHP remote file inclusion vulnerabilities in Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier for Mambo, where an attacker can trigger arbitrary PHP code execution by supplying a URL in the mosConfig_absolute_path parameter to either support.html.php or info.html.p...

CVE-2007-2042

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 support.html.php or 2 info.html.php. NOTE: the provenance of...

CVE-2007-2044

CVE-2007-2044 : Affected environment is the Antonis Ventouris Weather module for Mambo/Joomla! (mod_weather.php). The issue is a PHP remote file inclusion via an unvalidated absolute_path parameter, allowing an attacker to cause the web server to execute arbitrary PHP code. Root cause: improper i...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-2044

PHP remote file inclusion vulnerability in modweather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2007-2043

CVE-2007-2043 describes multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) module for Mambo/Joomla! (versions 1.08 and earlier). The flaws allow remote attackers to execute arbitrary PHP code by supplying a crafted URL to the mosConfig_absolute...

CVE-2007-2043

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia commosmedia 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 media.tab.php or 2 media.divs.php...

CVE-2007-2049

CVE-2007-2049 affects the Calendar Module (com_calendar) 1.5.5 in Mambo. The vulnerability arises from multiple PHP remote file inclusion flaws that allow an attacker to supply a URL via the absolute_path parameter to either com_calendar.php or mod_calendar.php, enabling remote code execution. NV...

CVE-2007-2044: Undefined Security Weakness

PHP remote file inclusion vulnerability in modweather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2007-2049: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability

No description provided by source. ======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected]...

Joomla! Mambo Component New Article 1.1 - Remote File Inclusion

Joomla! Mambo Component New Article 1.1 - Remote File Inclusion ======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected]...

Joomla! / Mambo Component New Article 1.1 - Remote File Inclusion

======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepag...

Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability ======================================================================...

CVE-2007-2005

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 contacttype.php, 2 itemstatustype.php, 3 projectstatustype.php, 4 requesttype.php, 5...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 contacttype.php, 2 itemstatustype.php, 3 projectstatustype.php, 4 requesttype.php, 5...

CVE-2007-2005

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 contacttype.php, 2 itemstatustype.php, 3 projectstatustype.php, 4 requesttype.php, 5...

CVE-2007-2005

CVE-2007-2005 describes multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo/Joomla!, allowing an attacker to execute arbitrary PHP code. The flaw is triggered via a user-provided URL in the mosConfig_absolute_path parameter passed to files in inc/: contact...

CVE-2007-1992

Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...