EUVD-2008-0862

Malware in sbrugna...

EUVD-2008-6451

Malware in sbrugna...

EUVD-2008-0861

Malware in sbrugna...

Joomla! and Mambo Datsogallery 1.3.1 Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Mambo Component com_trade - PID Cross-Site Scripting

Joomla! Mambo Component comtrade - PID Cross-Site Scripting source: https://www.securityfocus.com/bid/43915/info The 'comtrade' component for Joomla! and Mambo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this...

CVE-2009-4578

Cross-site scripting XSS vulnerability in the Facileforms comfacileforms component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php...

Joomla/Mambo Component eXtplorer Code Execution Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla/Mambo Component eXtplorer Code Execution Vulnerability ============================================================= ============================================= INTERNE...

joomlacatalogprod-sql.txt

Joomla & Mambo comcatalogproduction id SQL injection vulnerability! Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! ModuleName: comcatalogproduction ! ScriptName: Joomla & Mambo ! GoogleDork:...

Joomla! / Mambo Component Download3000 1.0 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28428/info The Download3000 component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Joomla! Mambo Component com_blog - pid SQL Injection

Joomla! Mambo Component comblog - pid SQL Injection source: https://www.securityfocus.com/bid/27971/info The 'comblog' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

Joomla! / Mambo Component com_most - 'secid' SQL Injection

source: https://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla/Mambo Component Taskhopper 1.1 RFI Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Joomla/Mambo Component Taskhopper 1.1 RFI Vulnerabilities ========================================================= ================================================== Joomla/Mambo...

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion source: https://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

PT-2006-5058 · Mambo Joomla · Jim

Name of the Vulnerable Software and Affected Versions: JIM component for Joomla or Mambo version 1.0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter in the install.jim.php file. Recommendations: For version 1.0.1,...

EUVD-2006-3983

Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the commtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 Savant2Pluginstylesheet.php, 2...