CVE-2008-3712

CVE-2008-3712 affects Mambo CMS versions 4.6.2 and 4.6.5 when register_globals is enabled. The vulnerability consists of multiple XSS vectors that allow a remote attacker to inject arbitrary web script or HTML via two parameters: (1) the query string to mambots/editors/mostlyce/jscripts/tiny_mce/...

CVE-2008-3712: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mambo 4.6.2 and 4.6.5, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 query string to mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php and the 2...

Mambo 4.6.2 Full Version - Multiple Cross Site Scripting - By Khashayar Fereidani

---------------------------------------------------------------- Script : Mambo 4.6.2 Full & Older Versions Type : Multiple Cross Site Scripting Vulnerabilities Alert Level : Medium ---------------------------------------------------------------- Download From :...

mambo462-morexss.txt

---------------------------------------------------------------- Script : Mambo 4.6.2 Full & Older Versions Type : Multiple Cross Site Scripting Vulnerabilities Alert Level : Medium ---------------------------------------------------------------- Download From :...

Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting

Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scripting

source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfig_sitename Cross-Site Scripting

Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfigsitename Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverag...

Joomla! Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions

Joomla! Mambo Component comutchat 0.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/30571/info The comutchat component for Mambo and Joomla! is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data...

Joomla! / Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/30571/info The comutchat component for Mambo and Joomla! is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and...

Mambo < 4.6.5 mos_user_template Local File Inclusion

The version of Mambo installed on the remote host fails to properly check user input to the 'mosusertemplate' cookie for directory traversal sequences before using it to include PHP code from a local file. An unauthenticated attacker may be able to exploit this issue to view arbitrary files or to...

Remote file inclusion

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

CVE-2008-2990

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

CVE-2008-2990

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

CVE-2008-2990

A PHP remote file inclusion (RFI) vulnerability exists in the facileforms.frame.php file of the FacileForms (com_facileforms) component version 1.4.4 for Mambo and Joomla! . The root cause is improper control of generation of code, where a remote attacker can execute arbitrary PHP code by providi...

Joomla! / Mambo Component com_is 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/30063/info The 'comis' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Joomla! Mambo Component com_is 1.0.1 - Multiple SQL Injections

Joomla! Mambo Component comis 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/30063/info The 'comis' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

CVE-2008-2990: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

Mambo Component n-gallery Multiple SQL Injection Vulnerabilities

No description provided by source. Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws &nbsp...

mambongal-sql.txt

Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws Home Page : http://www.vaalon.org Email : [email protected] DORK : allinurl:"comn-gallery" Exploit 1 : index.php?option=comn-gallery&flokkur=-1+union+select+concatusername,char58,passwordKHG+from+mosusers--...