CVE-2003-1245

The CVE-2003-1245 issue affects Mambo Site Server (CMS) in version 4.0.12, where index2.php allows a remote attacker to gain administrator access by sending a URL with session_id set to the MD5 hash of a valid session cookie. Root cause is improper validation of cookies, enabling session imperson...

CVE-2005-3586

The CVE-2005-3586 issue affects Mambo 4.5.2 through 4.5.2.3. The vulnerability allows remote attackers to discover the installation path by triggering an error-response URL, as described in multiple sources including PT-2005-4372. There is no publicly detailed exploit description beyond this beha...

CVE-2003-1245

index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where sessionid is set to the MD5 hash of a session cookie...

CVE-2003-1245: Undefined Security Weakness

index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where sessionid is set to the MD5 hash of a session cookie...

CVE-2005-3586: Undefined Security Weakness

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error...

[Full-disclosure] mambo remote code sexecution

a vulnerability exist in globals.php when registerglobals is off and allow remote code inclusion this a GLOBALS overwrite in components/comcontent/content.html.php there is the line: requireonce $GLOBALS'mosConfigabsolutepath' . '/includes/HTMLtoolbar.php' ; ok da globals.php: if...

PT-2005-4372 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo versions 4.5.2 through 4.5.2.3 Description: The issue allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. Recommendations: For Mambo versions 4.5.2 through...

Mambo Open Source, Path disclosure

KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...

Mambo Site Server 4.0.10 XSS Vulnerability - Active Check

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mambo Site Server XSS and Remote Arbitrary Code Execution Vulnerabilities (Jan 2003) - Active Check

An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpte...

Mambo Site Server XSS and remote arbitrary code execution

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. OpenVAS Vulnerability Test $Id: mamboflaws.nasl 9087 2018-03-12 17:24:24Z cfischer $...

Mambo Site Server 4.0.10 XSS

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: mamboxss.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: Mambo Site Server 4.0.10 XSS Authors: K-Otik.com Updated: 04/07/2009 Antu Sanadi...

Mambo Site Server index.php mos_change_template XSS

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: mamboxss3.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: Mambo Site Server index.php moschangetemplate XSS Authors: David Maciejak Updated:...

Mambo Site Server index.php mos_change_template XSS Vulnerability - Active Check

An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting XSS attack on this host. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[Full-disclosure] GeSHi Local PHP file inclusion 1.0.7.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...

CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 1.09 and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the comremository option...

CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module for Mambo Portal 4.5.1 (1.09) and earlier, exploitable via the filecatid parameter in the com_remository option. Root cause: improper handling of user-supplied input in that component. Impact: allows remote execution of arbitrary ...

CVE-2004-2143: Undefined Security Weakness

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 1.09 and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the comremository option...

Mambo <= 4.5.2.1 SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================== Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE...

Mambo 4.5.2.1 - SQL Injection

Mambo 4.5.2.1 - SQL Injection !/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...