mambo -- "register_globals" emulation layer overwrite vulnerability

A Secunia Advisory reports: peter MC tachatte has discovered a vulnerability in Mambo, which can be exploited by malicious people to manipulate certain information and compromise a vulnerable system. The vulnerability is caused due to an error in the "registerglobals" emulation layer in...

[Full-disclosure] mambo remote code sexecution

a vulnerability exist in globals.php when registerglobals is off and allow remote code inclusion this a GLOBALS overwrite in components/comcontent/content.html.php there is the line: requireonce $GLOBALS'mosConfigabsolutepath' . '/includes/HTMLtoolbar.php' ; ok da globals.php: if...

CVE-2002-0953

The PHP Address application (versions before 0.2f ) is vulnerable to Remote File Inclusion (RFI) via the globals.php file. When the PHP allow_url_fopen and register_globals variables are enabled, remote attackers can execute arbitrary PHP code by passing a URL through the LangCookie parameter. Th...

CVE-2002-0953: Undefined Security Weakness

globals.php in PHP Address before 0.2f, with the PHP allowurlfopen and registerglobals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter...