CMS 4.x.x Zorder SQL Injection

Exploit for php platform in category web applications + Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection...

CVE-2010-4944

SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...

Sql injection

SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...

CVE-2010-4944

SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...

CVE-2010-4944

CVE-2010-4944 describes a SQL injection in the Elite Experts component (com_elite_experts) for Mambo/Joomla! that allows remote attackers to execute arbitrary SQL via the id parameter in a showExpertProfileDetailed action to index.php. The issue affects the Joomla!/Mambo integration and is trigge...

CVE-2010-4944

SQL injection vulnerability in the Elite Experts comeliteexperts component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php...

CVE-2011-3754

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files...

Information disclosure

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files...

CVE-2011-3754

CVE-2011-3754 affects Mambo 4.6.5. The vulnerability allows information disclosure via a direct request to a PHP file, where an error message reveals the installation path (e.g., includes/sef.php). Impact is partial confidentiality loss. The technical details do not specify a patch or workaround ...

CVE-2011-3754

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files...

Mambo Component N-Frettir - SQL Injection

Mambo Component N-Frettir - SQL Injection source: https://www.securityfocus.com/bid/49422/info The Mambo CMS N-Frettir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

Mambo Component Ahsshop - SQL Injection

Mambo Component Ahsshop - SQL Injection source: https://www.securityfocus.com/bid/49419/info The Mambo CMS AHS Shop component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...

Mambo Component N-Skyrslur - Cross-Site Scripting

Mambo Component N-Skyrslur - Cross-Site Scripting source: https://www.securityfocus.com/bid/49415/info Mambo CMS N-Skyrslur is prone to cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code...

Mambo Component N-Myndir - SQL Injection

Mambo Component N-Myndir - SQL Injection source: https://www.securityfocus.com/bid/49424/info The Mambo CMS N-Myndir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Mambo Component N-Press - SQL Injection

Mambo Component N-Press - SQL Injection source: https://www.securityfocus.com/bid/49420/info The Mambo CMS N-Press component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

Mambo Component N-Gallery - SQL Injection

Mambo Component N-Gallery - SQL Injection source: https://www.securityfocus.com/bid/49418/info The Mambo CMS N-Gallery component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

Mambo Component N-Frettir - SQL Injection

source: https://www.securityfocus.com/bid/49422/info The Mambo CMS N-Frettir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Mambo Component N-Myndir - SQL Injection

source: https://www.securityfocus.com/bid/49424/info The Mambo CMS N-Myndir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Mambo Component N-Skyrslur - Cross-Site Scripting

source: https://www.securityfocus.com/bid/49415/info Mambo CMS N-Skyrslur is prone to cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Mambo Component Ahsshop - SQL Injection

source: https://www.securityfocus.com/bid/49419/info The Mambo CMS AHS Shop component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...