2097 matches found
Mambo 4.5.2.1 - Fetch Password Hash
Mambo 4.5.2.1 - Fetch Password Hash !/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password hash by pokleyzz content rating using sub query to select from mosusers Requirement: PHP 4.x with curl extension Description: The problem occur because $userrating variabl...
Mambo Open Source < 4.5.2.3 Multiple Vulnerabilities
The installed version of Mambo Open Source on the remote host suffers from the following flaws : - Session ID Spoofing Vulnerability An unspecified flaw in the script 'administrator/index3.php' can be exploited to spoof session IDs. - Local File Disclosure Vulnerability The...
mambo -- multiple vulnerabilities
A Secunia Advisory reports: Some vulnerabilities have been reported in Mambo, where some have unknown impacts and others can be exploited by malicious people to conduct spoofing and SQL injection attacks. Input passed to the "userrating" parameter when voting isn't properly sanitised before being...
Mambo 4.5.2.1 - Fetch Password Hash
!/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password hash by pokleyzz content rating using sub query to select from mosusers Requirement: PHP 4.x with curl extension Description: The problem occur because $userrating variable is not properly sanitize when for...
CYBSEC - PHPMailer Infinite Loop Denial of Service
CYBSEC S.A. www.cybsec.com Advisory Name: PHPMailer Infinite Loop Denial of Service ============== Vulnerability Class: Denial of Service ==================== Release Date: 05.27.2005 ============= Affected Applications: ====================== PHPMailer = 1.72 Affected Platforms:...
CVE-2004-2072
CVE-2004-2072 describes a cross-site scripting (XSS) vulnerability in Mambo Open Source 4.6 (and possibly earlier) via the Itemid parameter in index.php. The underlying issue is a failure to properly sanitize user input in the web application, enabling an attacker to inject script that may run in...
CVE-2002-1662
CVE-2002-1662 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11. The issues allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration. This is described in the NVD e...
CVE-2003-1203
Cross-site scripting XSS vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter...
CVE-2003-1204
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...
CVE-2002-1662
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via 1 search.php and 2 the "Your name" field during account registration...
CVE-2003-1203
CVE-2003-1203 affects Mambo Site Server 4.0.10. A cross-site scripting vulnerability exists in index.php via the ?option parameter, enabling remote attackers to run script in other clients. OpenVAS entries document the XSS issue; NVD/NVD-derived entries confirm the same. No remediation or fix ver...
CVE-2003-1204
CVE-2003-1204 involves multiple cross-site scripting (XSS) flaws in Mambo Site Server 4.0.12 BETA and earlier. The authenticated-remote issue allows attackers to inject script via various parameters across several PHP scripts (sectionswindow.php, gallery.php, navigation.php, uploadimage.php, view...
CVE-2004-2072
Cross-site scripting XSS vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter...
CVE-2003-1203: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter...
CVE-2002-1662: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via 1 search.php and 2 the "Your name" field during account registration...
CVE-2004-2072: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter...
CVE-2003-1204: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...
CVE-2004-1826
CVE-2004-1826 affects Mambo Open Source 4.5 stable 1.0.3 and earlier, where index.php is vulnerable to SQL injection via the id parameter. The vulnerability arises from improper input handling in the application, enabling remote attackers to craft SQL payloads and potentially influence database q...
CVE-2004-1825
CVE-2004-1825 is a cross-site scripting (XSS) vulnerability in Mambo Open Source’s index.php, specifically in the mos_change_template and return parameters. Multiple connected sources (OpenVAS NASL 16316/136141256231016316, NVD, and CVE records) confirm that vulnerable versions include Mambo Open...