Joomla! and Mambo com_profile Component - 'oid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27851/info The Joomla! and Mambo 'comprofile' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla! and Mambo 'com_joomlavvz' Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27921/info The Joomla! and Mambo 'comjoomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

Mambo Open Source 4.0.14 Server SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9196/info It has bee reported that Mambo Open Source 4.0.14 Server is prone to SQL injection attacks. The problem is said to occur due to insufficient sanitization of data passed to specific index.php variables. As a...

Joomla! and Mambo com_genealogy Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27887/info The Joomla! and Mambo 'comgenealogy' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

Mambo Component Comments <= 0.5.8.5g SQL Injection Vulnerability

No description provided by source. Mambo SQL Injection comcomments Version Affected: = 0.5.8.5g Author: CheebaHawk215 Home page: http://www.always420forum.com Dork: Review Script, Phil Taylor Vulnerable Code: $ptquery = SELECT FROM moscontentcomments where articleid=$id AND published=1 order by i...

Mambo Rssxt Component 1.0 MosConfig_absolute_path Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19593/info The Mambo Rssxt component for Joomla and Mambo is prone multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...

Mambo CMS 4.6.x (4.6.5) SQL Injection Vulnerability

No description provided by source. ========================================= Mambo CMS 4.6.x 4.6.5 | SQL Injection ========================================= 1. OVERVIEW Mambo CMS 4.6.5 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND Mambo is a full-featured, award-winning conten...

Mambo Site Server 4.0.14 emailarticle.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...

Mambo Site Server 4.0.14 contact.php Unauthorized Mail Relay

No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...

galleria Mambo Module <= 1.0b Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '63674' ssvid version = '1.0' author = '皮皮' vulDate = '2006-07-03' createDate = '2015-12-24...

Mambo com_lurm_constructor Component <= 0.6b Include Vulnerability

No description provided by source. C Y BE R - W A R R i O R T I M mambo comlurmconstructor Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: admin.lurmconstructor.php, line 2...

Mambo com_sim 0.8 - Blind SQL Injection Exploit

No description provided by source. ?php inisetmaxexecutiontime,0; printr' Mambo comsim Blind SQL Injection Exploit ----- xoron ----- [email protected] XORON c 2009 Tesekkurler: Ozan! kahrolsun!srail. WARNING!: php xoron.php http://www.example.com/index.php?option=comsim&task=viewchar&characterID=...

Mambo Open Source 4.5.1 (1.0.9) - XSS

No description provided by source. source: http://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may...

Joomla! and Mambo gigCalendar Component 1.0 'banddetails.php' SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '86077' ssvid version = '1.0' author = 'kikay' vulDate = '2009-02-24' createDate ...

Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n; echo disclosure exploit benchmark vesion\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo this is calle...

Joomla! and Mambo 'com_asortyment' Component - 'katid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27923/info The Joomla! and Mambo 'comasortyment' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

com_videodb Mambo Component <= 0.3en Remote Include Vulnerability

No description provided by source. comvideodb Mambo Componenet = 0.3en Remote Include Vulnerability Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7942/comvideodbv0.3en.zip bug found i...

Mambo Component Restaurant 1.0 - Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomrestaurant AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: comrestaurant EXPLOIT : index.php?option=comrestaurant&Itemid=S@BUN&func=detail&id=-1//union//select//0,0,password,0,0,0,0,0,0,0,0,0,username//from//mosusers/...

Mambo 4.6.2 Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Joomla! and Mambo 'com_guide' Component - 'category' Parameter - SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28271/info The 'guide' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...