CVE-2006-4363

In CVE-2006-4363, the CropImage component (com_cropimage) for Mambo 1.0 is affected. The vulnerability is a PHP remote file inclusion in admin.cropcanvas.php, exploitable via a URL in the cropimagedir parameter, allowing arbitrary PHP code execution on the server. Root cause: unvalidated input fr...

Mambo Component cropimage 1.0 - Remote File Inclusion

Mambo Component cropimage 1.0 - Remote File Inclusion C Y B E R - W A R R I O R T I M Mambo comcropimage 1.0 Component Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: in admin.cropcanvas.php , line 7 requireonce $cropimagedir."class.cropinterface.php";...

Mambo cropimage Component <= 1.0 Remote File Include Vulnerability

No description provided by source. C Y B E R - W A R R I O R T I M Mambo comcropimage 1.0 Component Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: in admin.cropcanvas.php , line 7 requireonce $cropimagedir."class.cropinterface.php"; Fix: 1-open...