limboCMS-rfi.txt

----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Limbo CMS Module event 1.0 Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

CVE-2006-6800

PHP remote file inclusion in eventcal/modeventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

CVE-2006-6800

PHP remote file inclusion in eventcal/modeventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

CVE-2006-6800

The CVE-2006-6800 issue affects Limbo CMS, specifically the eventcal module (eventcal/mod_eventcal.php, version 1.0). It is a PHP remote file inclusion vulnerability that lets an attacker supply a URL in the lm_absolute_path parameter to execute arbitrary PHP code on the server. This Remote Code ...

CVE-2006-6800: Undefined Security Weakness

PHP remote file inclusion in eventcal/modeventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

Limbo CMS Module event 1.0 - Remote File Inclusion

Limbo CMS Module event 1.0 - Remote File Inclusion ----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Limbo CMS Module event 1.0 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ Limbo CMS Module event 1.0 Remote File Include Vulnerability ============================================================ ----------------------------------------------- Limbo CM...

Limbo CMS Module event 1.0 - Remote File Inclusion

----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

CVE-2006-4859

Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...

CVE-2006-4860

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

CVE-2006-4860

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

CVE-2006-4860

CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....

CVE-2006-4859

Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...

CVE-2006-4859

Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...

CVE-2006-4859: Undefined Security Weakness

Unrestricted file upload vulnerability in contact.html.php in the Contact comcontact component in Limbo aka Lite Mambo CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contactattach parameter in a contac...

CVE-2006-4860: Undefined Security Weakness

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

Limbo com_fm Component sql.php classes_dir Parameter Remote File Inclusion

The remote host is running Limbo CMS, a content-management system written in PHP. The 'comfm' component of the version of Limbo installed on the remote host allows an unauthenticated, remote attacker to copy arbitrary files, possibly taken from a third-party host, into the web document directory...

Limbo Contact Component (com_contact) contact.html.php contact_attach Unrestricted File Upload

The remote host is running Limbo CMS, a content-management system written in PHP. The 'comcontact' component of the version of Limbo installed on the remote host allows an unauthenticated, remote attacker to upload arbitrary files to a known directory within the web server's document root. Provid...

Limbo CMS <= 1.0.4.2L (com_contact) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================= Limbo CMS = 1.0.4.2L comcontact Remote Code Execution Exploit ================================================================= !/usr/bin/php -q -d shortopentag=on ? printr'...