Joomla! / Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/30571/info The comutchat component for Mambo and Joomla! is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and...

Joomla! Mambo Component com_utchat 0.2 - Multiple Remote File Inclusions

Joomla! Mambo Component comutchat 0.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/30571/info The comutchat component for Mambo and Joomla! is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data...

Mambo < 4.6.5 mos_user_template Local File Inclusion

The version of Mambo installed on the remote host fails to properly check user input to the 'mosusertemplate' cookie for directory traversal sequences before using it to include PHP code from a local file. An unauthenticated attacker may be able to exploit this issue to view arbitrary files or to...

CVE-2008-2990

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

CVE-2008-2990

CVE-2008-2990 affects FacileForms (com_facileforms) 1.4.4 for Mambo/Joomla!, exposing a PHP remote file inclusion vulnerability in the ff_compath parameter of facileforms.frame.php. The underlying issue allows an attacker to supply a URL and potentially execute arbitrary PHP code on the vulnerabl...

CVE-2008-2990

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

Joomla! / Mambo Component com_is 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/30063/info The 'comis' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Joomla! Mambo Component com_is 1.0.1 - Multiple SQL Injections

Joomla! Mambo Component comis 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/30063/info The 'comis' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

Mambo Component n-gallery Multiple SQL Injection Vulnerabilities

No description provided by source. Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws &nbsp...

mambongal-sql.txt

Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws Home Page : http://www.vaalon.org Email : [email protected] DORK : allinurl:"comn-gallery" Exploit 1 : index.php?option=comn-gallery&flokkur=-1+union+select+concatusername,char58,passwordKHG+from+mosusers--...

CVE-2008-2905

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the CacheLite package in Mambo 4.6.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the CacheLite package in Mambo 4.6.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-2905

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the CacheLite package in Mambo 4.6.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-2905

Summary: CVE-2008-2905 is a PHP remote file inclusion vulnerability in the Cache_Lite Output.php used by Mambo 4.6.4 and earlier. The root cause is an RFI in includes/Cache/Lite/Output.php when register_globals is enabled, allowing an attacker to specify a URL via the mosConfig_absolute_path para...

Mambo Component N-Gallery - Multiple SQL Injections

Mambo Component N-Gallery - Multiple SQL Injections Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws Home Page : http://www.vaalon.org Email : [email protected] DORK : allinurl:"comn-gallery" Exploit 1 :...

Mambo Component N-Gallery - Multiple SQL Injections

Mambo Component n-gallery SQL Injection Author : AlbaniaN-H Site : http://www.khg-crew.ws Home Page : http://www.vaalon.org Email : [email protected] DORK : allinurl:"comn-gallery" Exploit 1 :...

Mambo Component n-gallery Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Mambo Component n-gallery Multiple SQL Injection Vulnerabilities ================================================================ Mambo Component n-gallery SQL Injection Auth...

nBill component for Joomla! 'cid' Parameter SQLi

The version of the nBill also known as netinvoice component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'cid' parameter before using it to construct database queries. Regardless of the PHP...

Mambo Component Articles (artid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"...