CVE-2007-5362

Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite commosmedia 4.5.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 credits.html.php, 2 info.html.php, 3...

CVE-2007-5177

SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...

CVE-2007-5177

SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...

CVE-2007-5177

CVE-2007-5177 describes an SQL injection in the MambAds (com_mambads) component for Mambo, affected in version 1.5 and earlier. The vulnerability is triggered via the caid parameter in index.php, allowing remote attackers to manipulate SQL commands. The connected documents also corroborate relate...

Mambo Component Mambads <= 1.5 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Mambo Component Mambads = 1.5 Remote SQL Injection Vulnerability ================================================================= Mambads = 1.5 Sql Injection Autor:Sniper45...

Mambo / Joomla! Multiple Components 'mosConfig_live_site' Parameter Remote File Include

A third-party component for Mambo or Joomla! is running on the remote host. At least one such component is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'mosConfiglivesite' parameter before using it to include PHP code. Provided the PHP...

CVE-2007-4745

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

CVE-2007-4745

AkoBook 3.42 and earlier (component com_akobook) for Mambo contain multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the sign function, where attacker-controlled Javascript events in the parameters (gbmail and gbpage) can be injected to execute scripts in the victim’s brows...

CVE-2007-4745

Multiple cross-site scripting XSS vulnerabilities in the AkoBook 3.42 and earlier component comakobook for Mambo allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 gbmail and 2 gbpage parameters in the sign function...

advisory-mambo-akobook-en.txt

Mambo Component AkoBook " are not allowed but simple quotes can still be used. The following code in one of the vulnerable inputs would result in a XSS:...

Mambo Component RemoSitory (cat) Remote SQL Injection Vulnerability

No description provided by source. Title : Mambo Component RemoSitory cat Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.remository.com/ $$ : Free Dork : inurl:func=selectcat + comremository // Result:43.400 DorkEx :...

Mambo Component SimpleFAQ 2.11 Remote SQL Injection Vulnerability

No description provided by source. Mambo Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" exploit;...

SimpleFAQ Component for Joomla! 'aid' Parameter SQLi

The version of the SimpleFAQ component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the simplephp.php script due to improper sanitization of user-supplied input to the 'aid' parameter before using it to construct database queries in the...

mamboremository-sql.txt

Title : Mambo Component RemoSitory cat Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.remository.com/ $$ : Free Dork : inurl:func=selectcat + comremository // Result:43.400 DorkEx :...

CVE-2007-4505

SQL injection vulnerability in index.php in the RemoSitory component comremository for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

Sql injection

SQL injection vulnerability in index.php in the RemoSitory component comremository for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

CVE-2007-4505

The CVE-2007-4505 entry describes a SQL injection in Mambo’s RemoSitory component (com_remository) within index.php, exploitable via the cat parameter in a selectcat action to execute arbitrary SQL. Affected software is Mambo with the RemoSitory component; the root cause is unsanitized/crafted in...

CVE-2007-4505

SQL injection vulnerability in index.php in the RemoSitory component comremository for Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action...

Mambo Component Remository - cat SQL Injection

Mambo Component Remository - cat SQL Injection Title : Mambo Component RemoSitory cat Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.remository.com/ $$ : Free Dork : inurl:func=selectcat + comremository // Result:43.400 DorkEx :...