2097 matches found
Mambo Site Server 4.0.10 XSS Vulnerability - Active Check
An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mambo Site Server index.php mos_change_template XSS Vulnerability - Active Check
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting XSS attack on this host. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mambo Site Server XSS and Remote Arbitrary Code Execution Vulnerabilities (Jan 2003) - Active Check
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpte...
[Full-disclosure] GeSHi Local PHP file inclusion 1.0.7.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...
CVE-2004-2143
SQL injection vulnerability in the ReMOSitory Server add-on module for Mambo Portal 4.5.1 (1.09) and earlier, exploitable via the filecatid parameter in the com_remository option. Root cause: improper handling of user-supplied input in that component. Impact: allows remote execution of arbitrary ...
CVE-2004-2143
SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 1.09 and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the comremository option...
CVE-2004-2143: Undefined Security Weakness
SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 1.09 and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the comremository option...
Mambo <= 4.5.2.1 SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================== Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE...
Mambo <= 4.5.2.1 SQL Injection Exploit
No description provided by source. !/usr/bin/perl Mambo = 4.5.2.1, MySQL = 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 3 $server = $ARGV0; $path = $ARGV1; $memberid = $ARGV2; $newsid = 1; $newsitemid = 1; $server =...
Mambo 4.5.2.1 - SQL Injection
Mambo 4.5.2.1 - SQL Injection !/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...
Mambo 4.5.2.1 - SQL Injection
!/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...
CVE-2005-2002
CVE-2005-2002 corresponds to a SQL injection in Mambo 4.5.2.2 and earlier through the user_rating parameter in content.php, allowing remote attackers to alter SQL queries. The CVE entry is supported by multiple connected advisories and scanners (e.g., OpenVAS/Nessus) referencing Mambo/Open Source...
CVE-2005-2002
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the userrating parameter...
CVE-2005-2002: Undefined Security Weakness
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the userrating parameter...
[EXPL] Mambo Remote Password Hash Retrieval (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
mambo4521.php.txt
!/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password hash by pokleyzz content rating using sub query to select from mosusers Requirement: PHP 4.x with curl extension Description: The problem occur because $userrating variable is not properly sanitize when for...
Mambo 4.5.2.2 SQL Injection in UPDATE statement
Product : Mambo 4.5.2.2 http://www.mamboserver.com Summary: Mambo 4.5.2.2 and below SQL Injection in UPDATE statement Severity: Low Description =========== Mambo is a full-featured management system that can be used for everything from simple websites to complex corporate applications. Details...
CVE-2005-2002
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the userrating parameter...
Mambo 4.5.2.1 Fetch Password Hash Remote Exploit
Exploit for unknown platform in category web applications ================================================ Mambo 4.5.2.1 Fetch Password Hash Remote Exploit ================================================ !/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password ha...
Mambo 4.5.2.1 Fetch Password Hash Remote Exploit
No description provided by source. !/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz pokleyzz at scan-associates.net ?php / Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz pokleyzz at scan-associates.net content rating using sub query to select from mosusers...