CVE-2007-1596

CVE-2007-1596 affects NFN Address Book (com_nfn_addressbook) v0.4 for Mambo/Joomla. The vulnerability is a PHP remote file inclusion via a URL supplied to mosConfig_absolute_path in either components/com_nfn_addressbook/nfnaddressbook.php or administrator/components/com_nfn_addressbook/nfnaddress...

Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability

No description provided by source. MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allo...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be...

Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Mambo Component nfnaddressbook 0.4 Remote File Inclusion Vulnerability ====================================================================== MAMBO & Joomla NFN Address...

CVE-2006-7149

Multiple cross-site scripting XSS vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via 1 the query string to a index.php, which reflects the string in an error message from modlogin.php; and the 2 mcname parameter to b moscomment.php and c comcomment.ph...

CVE-2006-7150

Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to 1 moscomment.php and 2 comcomment.php...

CVE-2006-7149

Multiple cross-site scripting XSS vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via 1 the query string to a index.php, which reflects the string in an error message from modlogin.php; and the 2 mcname parameter to b moscomment.php and c comcomment.ph...

CVE-2006-7149

CVE-2006-7149 describes multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x, allowing remote attackers to inject arbitrary script or HTML. The issues arise from reflected input in the query string of index.php and from the mcname parameter sent to moscomment.php and com_comment.php...

CVE-2006-7150

Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to 1 moscomment.php and 2 comcomment.php...

CVE-2006-7150

CVE-2006-7150 affects Mambo 4.6.x with multiple SQL injection vulnerabilities. The issues allow remote attackers to inject arbitrary SQL via the mcname parameter to moscomment.php and com_comment.php, enabling potentially unauthorized data access or modification. The vulnerability is documented w...

CVE-2006-7104

PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor MOStlyCE as created on May 2006, a component for Mambo 4.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-7104

The CVE-2006-7104 entry describes a PHP remote file inclusion vulnerability in MOStlyContent Editor (MOStlyCE) for Mambo 4.5.4. The flaw is in htmltemplate.php where remote code execution is possible via a URL supplied to the mosConfig_absolute_path parameter, enabling an attacker to run arbitrar...

CVE-2006-7093

Cross-site scripting XSS vulnerability in Mambo LaiThai 4.5.4 Security Patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-7092

SQL injection vulnerability in includes/mambo.php in Mambo LaiThai 4.5.4 SP2 and earlier allows remote attackers to execute arbitrary SQL commands via the usercookiepassword cookie parameter...

PT-2007-1370 · Mambo · Mambo Laithai

Name of the Vulnerable Software and Affected Versions: Mambo LaiThai versions 4.5.4 SP2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the usercookiepassword cookie parameter. Recommendations: For Mambo LaiThai versions 4.5.4 SP2...

CVE-2006-7093

Cross-site scripting XSS vulnerability in Mambo LaiThai 4.5.4 Security Patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2007-1371 · Laithai · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo LaiThai versions 4.5.4 Security Patch 2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations: For versions 4.5.4 Security Patch...

CVE-2006-7093

The CVE-2006-7093 entry describes a cross-site scripting (XSS) vulnerability in Mambo LaiThai, affecting versions 4.5.4 Security Patch 2 and earlier. The issue is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected PT-2007-1371 en...

CVE-2006-7092

CVE-2006-7092 describes an SQL injection in Mambo LaiThai software (versions 4.5.4 SP2 and earlier) via the usercookie[password] cookie parameter in includes/mambo.php. Remote attackers could execute arbitrary SQL commands. The CVSS metrics indicate a network-accessible high-severity issue with l...