Mambo FlatMenu Module MosConfig_Absolute_Path参数远程文件包含漏洞

Mambo FlatMenu是一款基于PHP的WEB应用程序。 Mambo FlatMenu不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本对用户提交的'MosConfigAbsolutePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 FlatMenu FlatMenu 1.07 目前没有解决方案提供： http://mamboxchange.com/projects/flatmenu/ !/usr/bin/perl + + - - - The Best Arab Security And Hacking...

Remote file inclusion

PHP remote file inclusion vulnerability in modflatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-1702

PHP remote file inclusion vulnerability in modflatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-1702

The CVE-2007-1702 entry describes a PHP remote file inclusion vulnerability in the Flatmenu 1.07 and earlier Mambo module, caused by an unsafe use of the mosConfig_absolute_path parameter in the file mod_flatmenu.php . This allows an attacker to supply a URL and cause the execution of arbitrary P...

Mambo Module Flatmenu <= 1.07 Remote File Include Exploit

No description provided by source. !/usr/bin/perl + + - - - The Best Arab Security And Hacking Team - - + + + - Mambo 4.5.1 Modules Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu =&nbsp...

Mambo Module Flatmenu 1.07 - Remote File Inclusion

!/usr/bin/perl + + - - - The Best Arab Security And Hacking Team - - + + + - Mambo 4.5.1 Modules Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7 bold',-foreground='blue'-pack; $mw-Label-text ...

Mambo Module Flatmenu <= 1.07 Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================= Mambo Module Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7...

Mambo Module Flatmenu 1.07 - Remote File Inclusion

Mambo Module Flatmenu 1.07 - Remote File Inclusion !/usr/bin/perl + + - - - The Best Arab Security And Hacking Team - - + + + - Mambo 4.5.1 Modules Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verda...

Mambo Module Flatmenu &lt;= 1.07 Remote File Include Exploit

No description provided by source. !/usr/bin/perl + + - - - The Best Arab Security And Hacking Team - - + + + - Mambo 4.5.1 Modules Flatmenu = 1.07 Remote File Include Exploit + + + - Script name: Flatmenu 1.07 for Mambo 4.5.1 - Script site:...