1915 matches found
Mambo < 4.6.2 includes/pdf.php dofreePDF Function Authentication Bypass
Binary data 3981.prm...
CVE-2007-2317
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...
Remote file inclusion
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
CVE-2007-2196
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
CVE-2007-2196
PHP remote file inclusion vulnerability in jambook.php in the Jambook comJambook 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a reliable third party because the...
CVE-2007-2196
CVE-2007-2196 targets Jambook (com_Jambook) version 1.0 beta7 for Mambo/Joomla!. It describes a PHP remote file inclusion in jambook.php triggered by a URL value for mosConfig_absolute_path, allowing remote code execution. The issue is disputed by third parties who say jambook.php protects agains...
com_mosmedia for Mambo & Jommla <= Remote File Include Vulnerability
commosmedia for Mambo & Jommla = Remote File Include Vulnerability - Exloit : - /components/commosmedia/media.tab.php?mosConfigabsolutepath=r57.txt? - /components/commosmedia/media.divs.php?mosConfigabsolutepath=r57.txt? - Page Script : -...
Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities
======================================================= Tosmo Mambo = 4.0.12 absolutepath Multiple RFI Vulnerabilities ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepage:...
Mambo/Joomla Module Weather (absolute_path) Remote File include Vuln
============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected] ============================================================...
Mambo/Joomla Component New Article Component <= 1.1 (absolute_path) Multiple RFI
======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepag...
Mambo module Calendar (Agenda) <= 155 (com_calendar.php) Multiple RFI Vuln
================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...
CVE-2007-2089
The CVE-2007-2089 entry covers multiple PHP remote file inclusion (RFI) vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo/Joomla!. The underlying issue is unsafe handling of the absolute_path parameter to com_articles.php, in either components/ or classes/html/, al...
Mambo/Joomla New Article Absolute_Path远程文件包含漏洞
Mambo/Joomla New Article是一款基于PHP的WEB应用程序。 Mambo/Joomla New Article不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本对用户提交的'Absolutepath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo New Article Component 1.1 目前没有解决方案提供： http://mamboserver.com/...
Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln.
BY Cr@zyKing [email protected] Thanks : CrackersChild & Liz0zim & Eno7 & Th3B3k1R & Erne & Uyuss & ApAc & Thehacker & RmX Special Thanks : Xoron & Ajannn & Str0ke & NukedX Script Name : Jambook Version : v1.0 beta7 Download...
joomlanew-rfi.txt
======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepag...
CVE-2007-2044
PHP remote file inclusion vulnerability in modweather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...
CVE-2007-2049
Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...
CVE-2007-2042
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 support.html.php or 2 info.html.php. NOTE: the provenance of...
CVE-2007-2042
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 support.html.php or 2 info.html.php. NOTE: the provenance of...