151 matches found
Limbo Contact Component (com_contact) contact.html.php contact_attach Unrestricted File Upload
The remote host is running Limbo CMS, a content-management system written in PHP. The 'comcontact' component of the version of Limbo installed on the remote host allows an unauthenticated, remote attacker to upload arbitrary files to a known directory within the web server's document root. Provid...
Limbo CMS 1.0.4.2L - 'com_contact' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dorks: inurl:contact inurl:Itemid inurl:optio...
Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dorks:...
Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Limbo CMS = 1.0.4.2L comcontact Remote Code Execution Exploit ================================================================= !/usr/bin/php -q -d shortopentag=on ? printr'...
Limbo CMS 1.0.4.2L - com_contact Remote Code Execution
Limbo CMS 1.0.4.2L - comcontact Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Limbo = 1.0.4.2L "comcontact" remote commands execution exploit by rgod [email protected] site:...
Mambo com_lurm_constructor Component <= 0.6b Include Vulnerability
No description provided by source. C Y BE R - W A R R i O R T I M mambo comlurmconstructor Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: admin.lurmconstructor.php, line 2...
Sql injection
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
CVE-2006-2363 affects Limbo CMS via the weblinks option (weblinks.html.php). The vulnerability is a SQL injection in the catid parameter that can allow an unauthenticated attacker to influence database queries, potentially exposing password hashes when Limbo uses MySQL. Exploitation details and i...
Limbo weblinks.html.php catid Parameter SQL Injection
The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize input to the 'catid' parameter of the 'index.php' script before using it in a database query. An unauthenticated attacker may be able to levera...
Limbo CMS (option=weblinks) SQL injection exploit
pre i Limbo CMS option=weblinks sql injection exploit i Cyber-Security.ORG | Security Advisory | Security Edithor by SnoB | Turkish hacking | security! ?php if !isset$GET'host' || !isset$GET'path' || !isset$GET'id' ? Usage: ?echo htmlentities$PHPSELF??host=hostname&path=limbopath&id=userid Exempl...
Limbo CMS 1.0.4.2 - catid SQL Injection
Limbo CMS 1.0.4.2 - catid SQL Injection i Limbo CMS option=weblinks sql injection exploit i coded by Oo Usage: ?host=hostname&path=limbopath&id=userid Exemple: ?host=127.0.0.1&path=/limbo&id=1 g Google: inurl:"index2.php?option=rss" OR "powered By Limbo CMS" /",$f && pregmatch"/login/",$f echo...
Limbo CMS <= 1.0.4.2 (catid) Remote SQL Injection Exploit
No description provided by source. pre i Limbo CMS option=weblinks sql injection exploit i coded by Oo ?php if !isset$GET'host' || !isset$GET'path' || !isset$GET'id' ? Usage: ?echo htmlentities$PHPSELF??host=hostname&path=limbopath&id=userid Exemple: ?echo...
Limbo CMS 1.0.4.2 - 'catid' SQL Injection
i Limbo CMS option=weblinks sql injection exploit i coded by Oo Usage: ?host=hostname&path=limbopath&id=userid Exemple: ?host=127.0.0.1&path=/limbo&id=1 g Google: inurl:"index2.php?option=rss" OR "powered By Limbo CMS" /",$f && pregmatch"/login/",$f echo "$f"; echo "+ Enjoy! :"; $success = 1;...
Limbo CMS sql.php classes_dir Parameter Remote File Inclusion
The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize user-supplied input to the 'classesdir' parameter of the 'classes/adodbt/sql.php' script before using it in PHP 'includeonce' functions. Provid...
Remote file inclusion
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...
CVE-2006-2142
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...
CVE-2006-2142
CVE-2006-2142 affects Limbo CMS (PHP) versions 1.04 and earlier. The vulnerability is a remote file inclusion in the classes_dir parameter of classes/adodbt/sql.php, where user-supplied input is used in include_once() without proper sanitization. This allows an attacker to cause arbitrary PHP cod...