Joomla Cartikads Shell Upload

Joomla components comcartikads Remote File Upload vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : January 02, 2009 Software Information + Vendor : http://www.cartikahosting.com + Download : - + version : 1.0 + Vulnerability : SQL injection + Dork...

Joomla! Component com_cartikads 1.0 - Arbitrary File Upload

Joomla components comcartikads Remote File Upload vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : January 02, 2009 Software Information + Vendor : http://www.cartikahosting.com + Download : - + version : 1.0 + Vulnerability : SQL injection + Dork...

Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting

Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scripting

source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfig_sitename Cross-Site Scripting

Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfigsitename Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverag...

mamboquran-sql.txt

+----------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --found by breakerunit and Don...

Mambo Open Source usercookie Parameter SQL Injection

The remote installation of Mambo Open Source fails to sanitize input to the 'usercookie' cookie array before using it in a database query to authenticate a user. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker may be able to exploit this issue to manipulate database queries and,...

Mambo Open Source Multiple Vulnerabilities

The remote installation of Mambo Open Source fails to sanitize input to the 'mosusertemplate' cookie before using it to include PHP code from a local file. An unauthenticated attacker may be able to exploit this issue to view arbitrary files or to execute arbitrary PHP code on the affected host. ...

mambo453.txt

GulfTech Security Research February 24, 2006 Vendor : Miro International Pty Ltd URL : http://www.mamboserver.com/ Version : Mambo = 4.5.3h Risk : Multiple Vulnerabilities Description: Mambo is a popular Open Source Content Management System released under the GNU General Public license GNU GPL...

Mambo Open Source / Joomla! GLOBALS Variable Remote File Include

The version of Mambo Open Source or Joomla! running on the remote host is affected by a remote file include vulnerability due to allowing the the GLOBALS variable array to be overwritten whenever the PHP 'registerglobals' setting is disabled. An unauthenticated, remote attacker can exploit this...

Mambo Open Source, Path disclosure

KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...

Mambo Open Source < 4.5.2.3 Multiple Vulnerabilities

The installed version of Mambo Open Source on the remote host suffers from the following flaws : - Session ID Spoofing Vulnerability An unspecified flaw in the script 'administrator/index3.php' can be exploited to spoof session IDs. - Local File Disclosure Vulnerability The...

CYBSEC - PHPMailer Infinite Loop Denial of Service

CYBSEC S.A. www.cybsec.com Advisory Name: PHPMailer Infinite Loop Denial of Service ============== Vulnerability Class: Denial of Service ==================== Release Date: 05.27.2005 ============= Affected Applications: ====================== PHPMailer = 1.72 Affected Platforms:...

CVE-2004-2072

Cross-site scripting XSS vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter...

CVE-2004-1826

CVE-2004-1826 affects Mambo Open Source 4.5 stable 1.0.3 and earlier, where index.php is vulnerable to SQL injection via the id parameter. The vulnerability arises from improper input handling in the application, enabling remote attackers to craft SQL payloads and potentially influence database q...

CVE-2004-1825

Cross-site scripting XSS vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 return or 2 moschangetemplate parameters...

CVE-2004-1826

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2004-1825

CVE-2004-1825 is a cross-site scripting (XSS) vulnerability in Mambo Open Source’s index.php, specifically in the mos_change_template and return parameters. Multiple connected sources (OpenVAS NASL 16316/136141256231016316, NVD, and CVE records) confirm that vulnerable versions include Mambo Open...

Mambo Open Source Tar.php Remote File Inclusion

The version of Mambo Open Source on the remote host fails to properly sanitize input passed through the 'mosConfigabsolutepath' parameter of the 'Tar.php' script. Provided PHP's 'registerglobals' setting is enabled, a remote attacker may exploit this vulnerability to cause code to be executed in...

Mambo Global Variables Unauthorized Access

The remote version of Mambo Open Source contains a vulnerability that could allow a remote attacker to gain unauthorized access to the system. This arises due to improper implementation of global variables and not sanitizing user-supplied input. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...