2088 matches found
MambelFish组件mambelfish.class.php远程文件包含漏洞
MambelFish是一个Mambo组件，用于支持手工翻译过程。 MambelFish在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 模块的administrator/components/commambelfish/mambelfish.class.php脚本没有正确地验证mosConfigabsolutepath的输入： requireonce quot;$mosConfigabsolutepath/administrator/classes/minixml/minixml.inc.phpquot; ;...
Another Mambo module remote inclusion vulneribility
Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file : MambWeather/Savant2/Savant2Pluginoptions.php ?php / Base plugin class. / global...
com_videodb Mambo Componenet <= 0.3en Remote Include Vulnerability
comvideodb Mambo Componenet = 0.3en Remote Include Vulnerability Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7942/comvideodbv0.3en.zip bug found in file : core/videodb.class.xml.php...
Mambo component remote inclusion vulneribility
Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...
MambWeather Mambo Module <= 1.8.1 Remote Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== MambWeather Mambo Module = 1.8.1 Remote Include Vulnerability ============================================================== Bug Found by h4ntu http://h4ntu.com batamhacker cre...
MambWeather Mambo Module <= 1.8.1 Remote Include Vulnerability
No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file : MambWeather/Savant2/Savant2Pluginoptions.php ?php / Base plug...
Mambo Module MambWeather 1.8.1 - Remote File Inclusion
Mambo Module MambWeather 1.8.1 - Remote File Inclusion Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file :...
[KAPDA::#60] Mambo V4.6.x vulnerabilities
KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.6.x Bug: XSS, Html Injection, Sql Injection Exploitation: Remote with browser Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from several...
Mambo Module MOStlyCE 4.5.4 - 'HTMLTemplate.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks ar...
Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion
Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to...
Update Protection against CBSMS Mambo Module Remote File Vulnerabilities
CBSMS Module for Mambo, an Open Source Content Management System, is prone to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary PHP code on an affected system...
Mambo Open Source usercookie Parameter SQL Injection
The remote installation of Mambo Open Source fails to sanitize input to the 'usercookie' cookie array before using it in a database query to authenticate a user. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker may be able to exploit this issue to manipulate database queries and,...
CVE-2006-5106
Cross-site scripting XSS vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either registerglobals or RGEMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-5106
CVE-2006-5106 : A cross-site scripting (XSS) vulnerability affects FacileForms prior to 1.4.7 used with Mambo/Joomla! when either register_globals or RG_EMULATION is enabled. Remote attackers could inject arbitrary script/HTML via unspecified vectors. The public documentation identifies the vulne...
CVE-2006-5106
Cross-site scripting XSS vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either registerglobals or RGEMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SimpleBoard-1.1.0.txt
Hello, the same problem is in the File imageupload.php: http://website.com/components/comsimpleboard/imageupload.php?sbp=evilscript Best Regards, Christian Haeussler -----Ursprüngliche Nachricht----- Von: [email protected] mailto:[email protected] Gesendet: Sonntag, 10. September 2006...
CVE-2006-5106: Undefined Security Weakness
Cross-site scripting XSS vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either registerglobals or RGEMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
com_ugbannerspos Remote File Include Vulnerabilities
-------------------------------------------------------------------------------- Title : comugbannerspos Remote File Include Vulnerabilities -------------------------------------------------------------------------------- Author: CrackersChild cont@ct: [email protected]...
bug com_madeira
lintah|adv|02@2006=========mambo-commadeira===php injek by : iFX a.k.a inversFX [email protected] [email protected] [email protected] ------------------------------- locate : Indonesia, Jakarta -------------------------------- date : 21/09/2006 -------------------------------- title : php backdoo...