EUVD-2006-4541

Malware in sbrugna...

Joomla com_comprofiler Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comcomprofiler component. An attacker can exploit the vulnerability to access or modify database data...

Joomla Community com_comprofiler SQL Injection (CVE-2008-2093)

An SQL injection vulnerability has been reported in Mambo Com ComprofilerMambo Com Comprofiler. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Mambo/Joomla Com_comprofiler 1.0 Plugin.class.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary...

CVE-2008-2093: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Profiler comcomprofiler component in Community Builder for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the user parameter in a userProfile action to index.php...

CVE-2006-4553

PHP remote file inclusion vulnerability in plugin.class.php in the comcomprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4553

PHP remote file inclusion vulnerability in plugin.class.php in the comcomprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4553

The CVE-2006-4553 entry describes a PHP remote file inclusion in com_comprofiler Components 1.0 RC2 for Mambo/Joomla!, exploitable via the mosConfig_absolute_path parameter to execute arbitrary PHP code. The affected software is a Mambo/Joomla! integration component (com_comprofiler Components 1....

CVE-2006-4553: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in plugin.class.php in the comcomprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

comcomprofiler.txt

--------------------------------------------------------------------------- Mambo/Joomla comcomprofiler Components == v1.0 RC 2 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 25th 2006...

Mambo/Joomla com_comprofiler Components <== v1.0 RC 2 Multiple Remote File Include Vulnerabilities

--------------------------------------------------------------------------- Mambo/Joomla comcomprofiler Components == v1.0 RC 2 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 25th 2006...