PT-2007-3536 · Com Jambook · Jambook

Name of the Vulnerable Software and Affected Versions: Jambook com Jambook version 1.0 beta7 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter. However, it has been disputed by a reliable third party because the...

Mambo/Joomla Module Weather (absolute_path) Remote File include Vuln

============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected] ============================================================...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...

CVE-2007-2044

PHP remote file inclusion vulnerability in modweather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

CVE-2007-1992

Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...

WebKalk2 1.9.0 (absolute_path) Remote File Inclusion Vulnerability

No description provided by source. WebKalk2 1.9.0 Remote File Include Vulnerablity D.Script: http://www.linuxdelta.de/uploads/media/webkalk2-1.9.0.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/engine/engine.inc.php?absolutepath=Shell.txt? Greetz To: Tryag-Tea...

WebKalk2 1.9.0 (absolute_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== WebKalk2 1.9.0 absolutepath Remote File Inclusion Vulnerability ================================================================== WebKalk2 1.9.0 Remote File Include...

TOSMO/Mambo 1.4.13a (absolute_path) Remote File Inclusion Vulns

Exploit for unknown platform in category web applications =============================================================== TOSMO/Mambo 1.4.13a absolutepath Remote File Inclusion Vulns ===============================================================...

TOSMO/Mambo 1.4.13a (absolute_path) Remote File Inclusion Vulns

No description provided by source. ======================================================= Tosmo Mambo = 4.0.12 absolutepath Multiple RFI Vulnerabilities ======================================================= Found By : Cold z3ro , [email protected]...

taskhopper-rfi.txt

================================================== Joomla/Mambo Component Taskhopper 1.1 /inc/ mosConfigabsolutepath RFI ================================================== Found By : Cold z3ro , [email protected] ================================================== Homepage: www.Hack-Teach.com...

Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities

======================================================= Tosmo Mambo = 4.0.12 absolutepath Multiple RFI Vulnerabilities ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepage:...

Mambo Module Weather (absolute_path) RFI Vulnerability

Exploit for unknown platform in category web applications ====================================================== Mambo Module Weather absolutepath RFI Vulnerability ====================================================== ============================================================ Mambo/Joomla...

Mambo Module Calendar (Agenda) 1.5.5 - Remote File Inclusion

================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...

Mambo Module Weather - 'absolute_path' Remote File Inclusion

============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected] ============================================================...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1138

CVE-2007-1138 affects Cromosoft Simple Plantilla PHP (SPP). A vulnerability in list_main_pages.php allows absolute path traversal via the nfolder parameter, enabling remote attackers to list arbitrary directories and read arbitrary files. The issue is rooted in an improper handling of absolute pa...

PT-2007-1294 · Jobline · Jobline

Name of the Vulnerable Software and Affected Versions: Jobline version 1.1.1 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary code via a URL in the mosConfig absolute path parameter in the admin.jobline.php script. Recommendations: For Jobline...

wordpress absolute path disclosure+analysis-vulnerability warning-the black bar safety net

Inadvertently change on storm path, it should be all versions are tested the official version and several beta version, the specific version of the exploit code where the line number is different, and is an array and the variables of the old issues, I believe that many places are also there. The...