Mambo Component Newsletter (listid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Mambo Component Newsletter listid Remote SQL Injection Vulnerability ====================================================================== joomla SQL...

Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS

WwW.BugReport.ir AmnPardaz Security Research Team Title: Mambo Vulnerabilities Vendor: http://mamboserver.com Bugs: Path Disclosure, XSS , XSRF, DOS Vulnerable Version:4.6.3 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: Mambo is an, open...

Mambo Module MOStlyCE 2.4 - 'connector.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27470/info The MOStlyCE module for Mambo is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Mambo Module MOStlyCE 2.4 Image Manager Utility - Arbitrary File Upload

source: https://www.securityfocus.com/bid/27472/info The MOStlyCE module for Mambo is prone to an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to upload and execute arbitrary script co...

Mambo Module MOStlyCE 2.4 Image Manager Utility - Arbitrary File Upload

Mambo Module MOStlyCE 2.4 Image Manager Utility - Arbitrary File Upload source: https://www.securityfocus.com/bid/27472/info The MOStlyCE module for Mambo is prone to an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this...

Mambo Module MOStlyCE 2.4 - connector.php Cross-Site Scripting

Mambo Module MOStlyCE 2.4 - connector.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27470/info The MOStlyCE module for Mambo is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

mambo-xssxsrf.txt

WwW.BugReport.ir AmnPardaz Security Research Team Title: Mambo Vulnerabilities Vendor: http://mamboserver.com Bugs: Path Disclosure, XSS , XSRF, DOS Vulnerable Version:4.6.3 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: Mambo is an, open...

Mambo MOStlyCE Mambot Arbitrary File Rename

The remote host is running MOStlyContent Editor MOStlyCE, the default WYSIWYG editor for Mambo. The version of MOStlyCE installed on the remote host contains a design flaw that may allow an attacker to rename files subject to the privileges of the web server user id. An unauthenticated attacker m...

CVE-2008-0261

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

Code injection

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

CVE-2008-0261

Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service query flood via unspecified vectors...

CVE-2008-0261

CVE-2008-0261 affects Mambo CMS versions 4.5.x and 4.6.x. A vulnerability in the search component/module can allow remote attackers to cause a denial of service (query flood). Exploitation vectors are not specified in the provided documents. No remediation details are given in the supplied sources.

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

CVE-2007-6455

CVE-2007-6455 involves multiple cross-site scripting (XSS) vulnerabilities in index.php of Mambo 4.6.2. The issues allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a com_frontpage option and (2) the option parameter. Documents provided identify the aff...

CVE-2007-6455

Multiple cross-site scripting XSS vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Itemid parameter in a comfrontpage option and the 2 option parameter...

mambo462-xss.txt

Application : Mambo v4.6.2 Author : Beenu Arora website : www.darkc0de.com Email ; [email protected] Website: http://sourceforge.net/projects/mambo/ --------------- |Multiple XSS | --------------- a.Vulnerable URL: http://localhost/mambo/index.php?option=comfrontpage&Itemid= Parameter = Item...

Multiple xss in mambo 4.6.2

Application : Mambo v4.6.2 Author : Beenu Arora website : www.darkc0de.com Email ; [email protected] Website: http://sourceforge.net/projects/mambo/ --------------- |Multiple XSS | --------------- a.Vulnerable URL: http://localhost/mambo/index.php?option=comfrontpage&Itemid= Parameter = Item...

Mambo 4.6.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...