EUVD-2006-4120

Malware in sbrugna...

EUVD-2007-4488

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in the RemoSitory component comremository for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

CVE-2006-4130

The CVE-2006-4130 issue is a PHP remote file inclusion in the Remository component (com_remository) for Mambo/Joomla! (3.25 and earlier). When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL passed to mosConfig_absolute_path. The vulnerability affects the...

CVE-2006-4130: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component comremository 3.25 and earlier for Mambo and Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...