Joomla! and Mambo 'com_blog' Component - 'pid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27971/info The 'comblog' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

mambo com_babackup Component <= 1.1 File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63864' ssvid version = '1.0' author = '皮皮' vulDate = '2006-08-22' createDate = '2015-12-24...

Mambo Open Source 4.6.2 administrator/popups/index3pop.php mosConfig_sitename Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Joomla! and Mambo Referenzen Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27926/info The Joomla! and Mambo Referenzen component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

perForms Mambo Component <= 1.0 - Remote File Inclusion

No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...

Mambo MOStlyCE 2.4 Module - 'connector.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27470/info The MOStlyCE module for Mambo is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Mambo Component Comments <= 0.5.8.5g SQL Injection Vulnerability

No description provided by source. Mambo SQL Injection comcomments Version Affected: = 0.5.8.5g Author: CheebaHawk215 Home page: http://www.always420forum.com Dork: Review Script, Phil Taylor Vulnerable Code: $ptquery = SELECT FROM moscontentcomments where articleid=$id AND published=1 order by i...

Mambo MOStlyCE Module 2.4 Image Manager Utility Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27472/info The MOStlyCE module for Mambo is prone to an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to uplo...

Mambo mambatStaff Component <= 3.1b Remote Inclusion Vulnerability

No description provided by source. mambatstaff Mambo Component = Remote Include Vulnerability Rish : High Class : Remote Script : mambatstaff Thanx : www.lezr.com/vb & All kuwait hackers d0rkiz : allinurl:commambatstaff...

Joomla Component (com_elite_experts) SQL Injection Vulnerability

No description provided by source. +Title Joomla Component comeliteexperts SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian...

Mambo com_registration_detailed <= 4.1 - Remote File Include

No description provided by source. Mambo comregistrationdetailed = 4.1 Remote File Inclusion Download Source : http://mamboxchange.com/projects/regdetailed/ Dork = allinur:comextendedregistration Found By: k1tk4t - k1tk4td0th4ck4tgmaild0tcom Location: Indonesia file ; registrationdetailed.inc.php...

Mambo Component ahsShop <= 1.51 (vara) SQL Injection Vulnerability

No description provided by source. Mambo Component comahsshop SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: comahsshopdo=default EXPLOiT 1 :...

MambWeather Mambo Module <= 1.8.1 - Remote Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file : MambWeather/Savant2/Savant2Pluginoptions.php ?php / Base plug...

Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n; echo disclosure exploit ii quicker and more effective version, but it floods\r\n; echo admin of links submissions...\r\n; echo by rgod...

Joomla com_jim Component <= 1.0.1 - Remote File Include Vulnerability

No description provided by source. C Y B E R - W A R R I O R T I M Mambo jim Component Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: in install.jim.php , line 16 requireonce$mosConfigabsolutepath./components/comjim/readme.txt; Exploit:...

Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: Mambo = 4.6.4 Remote File Inclusion Vulnerability | | download: http://mambo-foundation.org/ | | | | author: [email protected] | | homepage: http://irk4z.wordpress.com/ | | | |...

Joomla! and Mambo Artists Component - 'idgalery' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29407/info The Artists component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla! and Mambo com_iomezun Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27748/info The Joomla! and Mambo 'comiomezun' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Mambo mambelfish Component <= 1.1 - Remote File Include Vulnerability

No description provided by source. C Y BE R - W A R R i O R T I M mambo commambelfish Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: mambelfish.class.php?, line 28 requireonce...

Prince Clan Chess Club 0.8 Include.PCchess.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19138/info Prince Clan Chess Club for Mambo is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...