CVE-2007-6564

CVE-2007-6564 is a cross-site scripting (XSS) vulnerability in Limbo CMS 1.0.4.2, occurring in admin.php and exploitable via the com_option parameter. The affected component is the admin.php handler; the underlying cause is an input handling vulnerability that allows injection of arbitrary web sc...

CVE-2007-6564

Cross-site scripting XSS vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the comoption parameter...

Limbo CMS 1.0.4 - com_option Cross-Site Scripting

Limbo CMS 1.0.4 - comoption Cross-Site Scripting source: https://www.securityfocus.com/bid/27027/info Limbo CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Limbo CMS 1.0.4 - 'com_option' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27027/info Limbo CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Limbo CMS事件模块远程文件包含漏洞

Limbo是一种开源的基于PHP的Web内容管理系统。 Limbo CMS事件模块处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 Limbo事件模块相关的eventcal/modeventcal.php脚本没有正确验证lmabsolutepath参数的输入，允许攻击者通过包含本地或外部资源任意文件导致执行任意PHP代码。漏洞代码如下： includeonce$lmabsolutepath."components/comevent/lang/event.".$lmlanguage.".php";...

limboCMS-rfi.txt

----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Limbo CMS Module event 1.0 Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

CVE-2006-6800

PHP remote file inclusion in eventcal/modeventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

CVE-2006-6800

The CVE-2006-6800 issue affects Limbo CMS, specifically the eventcal module (eventcal/mod_eventcal.php, version 1.0). It is a PHP remote file inclusion vulnerability that lets an attacker supply a URL in the lm_absolute_path parameter to execute arbitrary PHP code on the server. This Remote Code ...

CVE-2006-6800

PHP remote file inclusion in eventcal/modeventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

Limbo CMS Module event 1.0 - Remote File Inclusion

----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Limbo CMS Module event 1.0 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ Limbo CMS Module event 1.0 Remote File Include Vulnerability ============================================================ ----------------------------------------------- Limbo CM...

Limbo CMS Module event 1.0 - Remote File Inclusion

Limbo CMS Module event 1.0 - Remote File Inclusion ----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

CVE-2006-4859

Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...

CVE-2006-4860

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

CVE-2006-4860

CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....

CVE-2006-4859

Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...

CVE-2006-4860

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

CVE-2006-4859

Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...

Limbo com_fm Component sql.php classes_dir Parameter Remote File Inclusion

The remote host is running Limbo CMS, a content-management system written in PHP. The 'comfm' component of the version of Limbo installed on the remote host allows an unauthenticated, remote attacker to copy arbitrary files, possibly taken from a third-party host, into the web document directory...