Mambo LMTG Myhomepage远程文件包含漏洞

lmtgmyhomepage是一款基于Mambo的应用模块。 lmtgmyhomepage不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 tectonique lmtgmyhomepage 1.2 http://www.kamgaing.com/...

Mambo AkoComment Module mosConfig_absolute_path远程文件包含漏洞

Mambo AkoComment是一款基于PHP的WEB应用程序。 Mambo AkoComment不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'akocomments.php'脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Arthur Konze WebDesign AkoComment 1.1 http://www.konze.de/...

Reporter Mambo Component Reporter.sql.PHP远程文件包含漏洞

MamboXChange Reporter是一款基于Mambo的报告组件模块。 MamboXChange Reporter不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'reporter.sql.php'脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码 MamboXChange Reporter 1.0 http://mamboxchange.com/projects/reporter/...

Mambo mmp Component <= 1.2 Remote File Include Vulnerability

No description provided by source. C Y BE R - W A R R i O R T I M mambo commmp Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: help.mmp.php?, line 12 ?php global $mosConfigabsolutepath; require...

Mambo mambelfish Component <= 1.1 Remote File Include Vulnerability

No description provided by source. C Y BE R - W A R R i O R T I M mambo commambelfish Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: mambelfish.class.php?, line 28 requireonce...

Joomla Mosets Tree <= 1.0 Remote File Include Vulnerability

No description provided by source. !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla Mosets Tree = 1.0 Remote File Include Vulnerability...

Com_Bayesiannaivefilter Mambo远程文件包含漏洞

ComBayesiannaivefilter Mambo是一款基于Mambo的应用模块程序。 ComBayesiannaivefilter Mambo不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'lang.php'脚本对用户提交的"mosConfigabsolutepath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Mambo combayesiannaivefilter Component 1.1...

Mambo CopperminePhotoGalery Component Remote Include Vulnerability

No description provided by source. CopperminePhotoGallery Component Found By k1tk4t Indonesia This bug allows a remote atacker to execute commands via RFI file: cpg.php bug: require $mosConfigabsolutepath."/administrator/components/comcpg/config.cpg.php"; path: add in cpg.php defined 'VALIDMOS' o...

mbo phpShop Component <= 1.2 RC2b File Include Vulnerability

No description provided by source. Affected Application: Mambo phpShop v1.2 RC2b Mambo CMS Component . . : contact : . . . . . . . . . . . . . . . . . . . . . . . . . . . Discoverd/Found by: Charles Nelwan a.k.a Cmaster4 Team: BatamHacker irc.dal.net crew URL: http://www.batamhacker.info/forum...

Mambo Remository Component <= 3.25 Remote Include Vulnerability

No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: o9.o8.2oo6 .. Affected Application: Remository v3.25 Mambo/Joomla CMS Component...

Mambo a6mambocredits Component 1.0.0 File Include Vulnerability

No description provided by source. Title : Mambo a6mambocredits component v1.0.0 == mosConfiglivesite Remote File Include Vulnerabilities Affected Application: Mambo a6mambocredits component v1.0.0 Mambo CMS Component . . : contact :...

Mambo Gallery Manager MosConfig_Absolute_Path远程文件包含漏洞

Mambo Gallery Manager是一款基于Mambo的图片程序。 Mambo Gallery Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'help.mgm.php'脚本对用户提交的"mosConfigabsolutepath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Mambo Mambo Gallery Manager Component 0.95 r3 http://mamboxchange.com/projects/mgm/...

CVE-2006-6203

Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 comflyspray component for Mambo allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2006-6203

The CVE-2006-6203 issue is a directory traversal vulnerability in Flyspray ME 1.0.1 (com_flyspray) used with Mambo. An attacker can exploit a dot-dot (..) in the file parameter of startdown.php to read arbitrary files on the server. Affected software: Flyspray ME 1.0.1 (com_flyspray) component fo...

jambook.txt

------=Part12610429492606.1164565546478 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Advisory 14 Title: Mambo component "jambook" Html injection Vulnerability Author: 0ozeuso0 Arturo Z. Contact: zeus at diosdelared.com...

com_flyspray Mambo Com. <= 1.0.1 Remote File Disclosure Vulnerability

| | / | / | | | | | / | / / | | | | '| | |/| |/ / / / / | | '| | | / | | || | | | | | | | | / | | | | || |/|| || ||,// / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1 d.page:http://mamboxchange.com/frs/download.php/8304/comflyspray1.0.1.zip Authour: Dr Max Virus Location:Egypt Bug i...

com_flyspray Mambo Com. <= 1.0.1 Remote File Disclosure Vulnerability

No description provided by source. | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1...

com_flyspray Mambo Com. <= 1.0.1 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== comflyspray Mambo Com. \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1 Authour: Dr Max Virus Location:Egypt Bug in...

Mambo Component com_flyspray 1.0.1 - Remote File Disclosure

Mambo Component comflyspray 1.0.1 - Remote File Disclosure | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1...

Mambo Component com_flyspray < 1.0.1 - Remote File Disclosure

| \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1 d.page:http://mamboxchange.com/frs/download.php/8304/comflyspray1.0.1.zip Authour: Dr...