CVE-2006-7092

CVE-2006-7092 describes an SQL injection in Mambo LaiThai software (versions 4.5.4 SP2 and earlier) via the usercookie[password] cookie parameter in includes/mambo.php. Remote attackers could execute arbitrary SQL commands. The CVSS metrics indicate a network-accessible high-severity issue with l...

Sql injection

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter...

CVE-2007-0789

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter...

CVE-2007-0789

Affected software: Mambo before 4.5.5. Vulnerable component: cancel edit functions (via id parameter). Issue: SQL injection that allows remote attackers to execute arbitrary SQL commands. Impact: potential data compromise via arbitrary queries. Remediation: upgrade to Mambo 4.5.5 or later; as a t...

CVE-2007-0789

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter...

PT-2007-2234 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo versions prior to 4.5.5 Description: The issue allows remote attackers to execute arbitrary SQL commands, possibly related to the id parameter in cancel edit functions. Recommendations: For versions prior to 4.5.5, update to version 4.5...

joomla150beta-sql.txt

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...

CVE-2007-0374

SQL injection vulnerability in 1 Joomla! 1.0.11 and 1.5 Beta, and 2 Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing...

Sql injection

SQL injection vulnerability in 1 Joomla! 1.0.11 and 1.5 Beta, and 2 Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing...

CVE-2007-0374

SQL injection vulnerability in 1 Joomla! 1.0.11 and 1.5 Beta, and 2 Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling content editing...

CVE-2007-0374

SQL injection vulnerability CVE-2007-0374 affects Joomla! 1.0.11, Joomla! 1.5 Beta and Mambo 4.6.1, exploitable via the id parameter when cancelling content editing. The root cause is improper input handling in the affected code path, allowing remote attackers to execute arbitrary SQL commands. I...

CVE-2006-6634

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai comextcalendar 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGEXTLANGUAGESDIR parameter to adminevents.php, 2 the mosConfigabsolutepath parameter to...

CVE-2006-6634

The CVE-2006-6634 entry describes multiple PHP remote file inclusion vulnerabilities in ExtCalThai (com_extcalendar) 0.9.1 and earlier for Mambo. The issue allows an attacker to execute arbitrary PHP code via crafted URLs in three parameters: CONFIG_EXT[LANGUAGES_DIR] to admin_events.php, mosConf...

CVE-2006-6634

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai comextcalendar 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGEXTLANGUAGESDIR parameter to adminevents.php, 2 the mosConfigabsolutepath parameter to...

Mambo LMTG Myhomepage远程文件包含漏洞

lmtgmyhomepage是一款基于Mambo的应用模块。 lmtgmyhomepage不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 tectonique lmtgmyhomepage 1.2 http://www.kamgaing.com/...

Mambo A6MamboCredits远程文件包含漏洞

Mambo A6MamboCredits是一款基于Mambo的应用模块。 Mambo A6MamboCredits不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'admin.a6mambocredits.php'脚本对用户提交的'mosConfiglivesite'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 active6 a6MamboCredits 1.0...

Mambo CropImage mosConfig_absolute_path远程文件包含漏洞

Mambo CropImage是一款基于PHP的WEB应用程序。 Mambo CropImage不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'admin.cropcanvas.php'脚本对用户提交的'cropimagedir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 CropImage CropImage 1.0 beta [email protected]...

Mambo Jim Component Install.Jim.PHP远程文件包含漏洞

Joomla JIM是一款基于MAMBO的即时通信模块。 Joomla JIM不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'install.jim.php'脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Joomla JIM Instant Messaging Component 1.01 http://forge.joomla.org/sf/sfmain/do/viewProject/projects.jim...

Mambo CatalogShop mosConfig_absolute_path远程文件包含漏洞

Mambo CatalogShop是一款基于PHP的WEB应用程序。 Mambo CatalogShop不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'catalogshop.php'脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 K.J. Strickland CatalogShop 1.0 beta 2 无 http://www.site.com/catalogshop.php?mosConfigabsolutepath=shell...

Mambo Rssxt Component MosConfig_absolute_path远程文件包含漏洞

Mambo RSSXT是一款基于Mambo的应用模块。 Mambo RSSXT不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Mambo RSSXT Component 1.0 http://mamboxchange.com/projects/rssxt/...