1915 matches found
Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Mambo mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to 1 auth/extauth/drivers/mambo.inc.php or 2 auth/extauth/drivers/postnuke.inc.php...
CVE-2006-2815
Multiple cross-site scripting XSS vulnerabilities in Two Shoes M-Factory TSMF SimpleBoard 1.1.0 Stable aka comsimpleboard, as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via 1 the Name field in "post ne topic" in the Frontend, 2 the Title aka...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Two Shoes M-Factory TSMF SimpleBoard 1.1.0 Stable aka comsimpleboard, as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via 1 the Name field in "post ne topic" in the Frontend, 2 the Title aka...
CVE-2006-2815
Multiple cross-site scripting XSS vulnerabilities in Two Shoes M-Factory TSMF SimpleBoard 1.1.0 Stable aka comsimpleboard, as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via 1 the Name field in "post ne topic" in the Frontend, 2 the Title aka...
CVE-2006-2815
Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard) used in Mambo/Joomla! has multiple XSS vulnerabilities. The issues affect frontend and backend fields: (1) Name in post topic, (2) Title in Simpleboard Configuration, (3) Name in Forum-Title, and (4) Name in Category-Title ...
joomlaMamboXSS.txt
Joomla/Mambo CMS Component SimpleBoard 1.1.0 Stable XSS-Vulnerabilities ======================================================================= Release Date ------------ June 01, 2006 Vendor ------- Two Shoes Mambo Factory http://www.tsmf.net/ Version ------- SimpleBoard 1.1.0 Stable comsimpleboa...
Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities
Joomla/Mambo CMS Component SimpleBoard 1.1.0 Stable XSS-Vulnerabilities ======================================================================= Release Date ------------ June 01, 2006 Vendor ------- Two Shoes Mambo Factory http://www.tsmf.net/ Version ------- SimpleBoard 1.1.0 Stable comsimpleboa...
Mambo <= 4.6. RC1 xss
Mambo = 4.6. RC1 Cross Site Scripting --------------------------------------- http://target/pathtomambo/administrator/popups/index3pop.php?mosConfigsitename=/titlescriptalertdocument.cookie/script...
Beoped Portal XSS
Aria-Security.net Advisory Discovered by: O.u.t.l.a.w www.Aria-security.net Gr33t to: A.u.r.a & R@1D3N & Smok3r & DrtRp ----------------------------------------------------------- Software: BeoPed Portal Link And Online Demo : http://www.beoped.com/beoportal/index.php Attack method: Cross Site...
FreeBSD : mambo -- multiple vulnerabilities (0bf9d7fb-05b3-11da-bc08-0001020eed82)
A Secunia Advisory reports : Some vulnerabilities have been reported in Mambo, where some have unknown impacts and others can be exploited by malicious people to conduct spoofing and SQL injection attacks. - Input passed to the 'userrating' parameter when voting isn't properly sanitised before...
FreeBSD : mambo -- 'register_globals' emulation layer overwrite vulnerability (ffb82d3a-610f-11da-8823-00123ffe8333)
A Secunia Advisory reports : peter MC tachatte has discovered a vulnerability in Mambo, which can be exploited by malicious people to manipulate certain information and compromise a vulnerable system. The vulnerability is caused due to an error in the 'registerglobals' emulation layer in...
Cmscout <= V1.10 multiple XSS attack vectors
Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...
CVE-2006-1956
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
CVE-2006-1957
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
Design/Logic Flaw
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
Design/Logic Flaw
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
CVE-2006-1957
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
CVE-2006-1956
The CVE-2006-1956 vulnerability affects the com_rss option (rss.php) in Mambo and Joomla!, where an invalid feed parameter can cause an error message that reveals the server path, enabling information disclosure. The primary sources document the affected components and the impact as partial confi...
PT-2006-2940 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Mambo affected versions not specified Joomla! affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message. This is...