EUVD-2009-2091

Malware in sbrugna...

Mundi Mail Multiple Remote Command Execution Vulnerabilities

Mundi Mail is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user- supplied input. An attacker can exploit these issues to execute arbitrary commands within the context of the vulnerable system. MundiMail version 0.8.2 is vulnerable; other version...

Mundi Mail Multiple RCE Vulnerabilities

Mundi Mail is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user- supplied input. An attacker can exploit these issues to execute arbitrary commands within the context of the vulnerable system. MundiMail version 0.8.2 is vulnerable, other version...

Directory traversal

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

CVE-2009-2095

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

CVE-2009-2095

CVE-2009-2095 is a PHP remote file inclusion vulnerability affecting Mundi Mail 0.8.2 via template/simpledefault/admin/_masterlayout.php. The root cause is register_globals being enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the top parameter. When allow_url_fo...

CVE-2009-2095

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

CVE-2009-2095: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

Mundi Mail 0.8.2 - top Remote File Inclusion

Mundi Mail 0.8.2 - top Remote File Inclusion ---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down :...

Mundi Mail 0.8.2 Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down : http://sourceforge.net/project/showfiles.php?groupid=100875&packageid=108474&releaseid=221732...

Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mundi Mail 0.8.2 top Remote File Inclusion Vulnerability ==========================================================...

Mundi Mail 0.8.2 - 'top' Remote File Inclusion

---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down : http://sourceforge.net/project/showfiles.php?groupid=100875&packageid=108474&releaseid=221732...

Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down :...