1915 matches found
CVE-2006-6049
PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 comshambo2 component for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-6051
PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter comreporter component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-6049
PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 comshambo2 component for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-6049
CVE-2006-6049 affects the Shambo2 (com_shambo2) component for Mambo 4.5. The vulnerability is a PHP remote file inclusion in shambo2.php, exploitable via a URL parameter mosConfig_absolute_path, enabling arbitrary PHP code execution. Root cause: unvalidated/unsafely used parameter allowing inclus...
CVE-2006-6051
CVE-2006-6051 describes a PHP remote file inclusion in MosReporter (com_reporter) for Mambo/Joomla! via the mosConfig_absolute_path parameter in reporter.logic.php, allowing an attacker to execute arbitrary PHP code. Affected software: MosReporter component used in Mambo/Joomla! ecosystems. Root ...
shambo2-45.txt
!/usr/bin/perl shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit Bug iN shambo2.php include$mosConfigabsolutepath . '/components/comshambo2/define.php'; you can test it on http://www.kittycleveland.com/site/ Bug Found & coded By CrackersChild [email protected] Usage pe...
Mambo EstateAgent组件mosConfig_absolute_path远程文件包含漏洞
EstateAgent是Mambo中的一个组件，允许小型地产公司和代理管理地产资料。 EstateAgent模块的/administrator/components/comestateagent/configuration.php脚本没有正确地验证mosConfigabsolutepath参数的输入，允许攻击者可以通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。 bits-dont-bite EstateAgent 1.0.2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Joomla extended_registration组件远程文件包含漏洞
extendedregistration是Mambo（也被称为Joomla）中提供扩展注册支持的组件。 extendedregistration组件在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 extendedregistration组件没有正确地验证mosConfigabsolutepath参数数据的输入，允许攻击者通过包含本地或外部资源任意文件导致执行任意PHP代码。admin.extendedregistration.php文件中漏洞代码如下： ?php require"../configuration.php"; functi...
CVE-2006-5519
PHP remote file inclusion vulnerability in Savant2/Savant2Pluginoptions.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
Mambo A6MamboCredits 1.0 组件远程文件包含漏洞
A6MamboCredits是Mambo中的一个组件，用于在一个集中的页面显示组件的致谢信息。 A6MamboCredits组件在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上有Web进程权限执行任意命令。 模块的administrator/components/coma6mambocredits/admin.a6mambocredits.php脚本没有正确地验证mosConfigabsolutepath参数的输入，允许攻击者可以通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。 active6...
Mambo/Joomla plugin.class.php脚本远程文件包含漏洞
Mambo（也被称为Joomla）是一款开放源代码的WEB内容管理系统。 Mambo在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 在Mambo的comcomprofiler文件夹的plugin.class.php脚本中： -----------------------plugin.class.php---------------------- ?php / Plugin handler @package Joomla @author various, JoomlaJoe and Beat / requireonce...
MambelFish组件mambelfish.class.php远程文件包含漏洞
MambelFish是一个Mambo组件，用于支持手工翻译过程。 MambelFish在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 模块的administrator/components/commambelfish/mambelfish.class.php脚本没有正确地验证mosConfigabsolutepath的输入： requireonce quot;$mosConfigabsolutepath/administrator/classes/minixml/minixml.inc.phpquot; ;...
Another Mambo module remote inclusion vulneribility
Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file : MambWeather/Savant2/Savant2Pluginoptions.php ?php / Base plugin class. / global...
com_videodb Mambo Componenet <= 0.3en Remote Include Vulnerability
comvideodb Mambo Componenet = 0.3en Remote Include Vulnerability Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7942/comvideodbv0.3en.zip bug found in file : core/videodb.class.xml.php...
Mambo component remote inclusion vulneribility
Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...
MambWeather Mambo Module <= 1.8.1 Remote Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== MambWeather Mambo Module = 1.8.1 Remote Include Vulnerability ============================================================== Bug Found by h4ntu http://h4ntu.com batamhacker cre...
MambWeather Mambo Module <= 1.8.1 Remote Include Vulnerability
No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file : MambWeather/Savant2/Savant2Pluginoptions.php ?php / Base plug...
Mambo Module MambWeather 1.8.1 - Remote File Inclusion
Mambo Module MambWeather 1.8.1 - Remote File Inclusion Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo module remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/1498/MambWeather181.zip bug found in file :...
[KAPDA::#60] Mambo V4.6.x vulnerabilities
KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.6.x Bug: XSS, Html Injection, Sql Injection Exploitation: Remote with browser Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from several...
Mambo Module MOStlyCE 4.5.4 - 'HTMLTemplate.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks ar...