mambo component nfnaddressbook 0.4 - Remote File Inclusion Vulnerability

No description provided by source. MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allo...

a6mambohelpdesk Mambo Component <= 18RC1 Include Vulnerability

No description provided by source. a6mambohelpdesk Mambo Component = 18RC1 Remote Include Vulnerability Rish : High Class : Remote Script : a6mambohelpdesk Thanx : www.lezr.com/vb codes ? include$mosConfiglivesite/components/coma6mambohelpdesk/about.html ; ? d0rkiz : allinurl:coma6mambohelpdesk...

Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n; echo disclosure exploit benchmark vesion\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo this is calle...

Mambo com_sim 0.8 - Blind SQL Injection Exploit

No description provided by source. ?php inisetmaxexecutiontime,0; printr' Mambo comsim Blind SQL Injection Exploit ----- xoron ----- [email protected] XORON c 2009 Tesekkurler: Ozan! kahrolsun!srail. WARNING!: php xoron.php http://www.example.com/index.php?option=comsim&task=viewchar&characterID=...

Mambo Display MOSBot Manager Component mosConfig_absolute_path Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19621/info The Mambo Display MOSBot Manager component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

Joomla! and Mambo com_sermon 0.2 Component - 'gid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27673/info The Joomla! and Mambo 'comsermon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability

No description provided by source. ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

com_forum Mambo Component <= 1.2.4RC3 Remote Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6873/phpbbcomponent1.2.4RC3.zip bug found in file : download.php define'INPHPBB', true; //$phpbbrootpa...

Joomla / Mambo Component com_ezine 2.1 - Remote File Include Vulnerability

No description provided by source. Joomla / Mambo Component comezine Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 20 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /|...

Mambo 4.6.2 Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Joomla! and Mambo 'com_wines' 1.0 Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27975/info The 'comwines' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

Joomla! and Mambo faq Component - 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

Joomla! and Mambo com_iigcatalog Component - 'cat' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27883/info The Joomla! and Mambo 'comiigcatalog' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

CVE-2013-2563

Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...

CVE-2013-2562

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-2564

Mambo CMS 4.6.5 allows remote attackers to cause a denial of service memory and bandwidth consumption by uploading a crafted file...

Design/Logic Flaw

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file...

Design/Logic Flaw

Mambo CMS 4.6.5 allows remote attackers to cause a denial of service memory and bandwidth consumption by uploading a crafted file...

CVE-2013-2563

CVE-2013-2563 affects Mambo CMS 4.6.5. The issue is world-readable permissions on configuration.php, enabling local users to read the admin password hash. The connected documents confirm the affected product and the root cause, but do not provide a remediation or exploit details. Action: monitor ...