Lucene search
+L

1915 matches found

exploitpack
exploitpack
added 2006/10/16 12:00 a.m.14 views

Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion

Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to...

7.5AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2006/10/11 12:00 a.m.23 views

Update Protection against CBSMS Mambo Module Remote File Vulnerabilities

CBSMS Module for Mambo, an Open Source Content Management System, is prone to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary PHP code on an affected system...

5.1CVSS3.3AI score0.03081EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2006/10/06 12:00 a.m.26 views

Mambo Open Source usercookie Parameter SQL Injection

The remote installation of Mambo Open Source fails to sanitize input to the 'usercookie' cookie array before using it in a database query to authenticate a user. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker may be able to exploit this issue to manipulate database queries and,...

5.6AI score
SaveExploits0References1
NVD
NVD
added 2006/10/03 4:03 a.m.21 views

CVE-2006-5106

Cross-site scripting XSS vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either registerglobals or RGEMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.1CVSS5.8AI score0.01245EPSS
SaveExploits0References5
CVE
CVE
added 2006/10/02 8:00 p.m.49 views

CVE-2006-5106

CVE-2006-5106 : A cross-site scripting (XSS) vulnerability affects FacileForms prior to 1.4.7 used with Mambo/Joomla! when either register_globals or RG_EMULATION is enabled. Remote attackers could inject arbitrary script/HTML via unspecified vectors. The public documentation identifies the vulne...

5.1CVSS6AI score0.01245EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2006/10/02 8:00 p.m.26 views

CVE-2006-5106

Cross-site scripting XSS vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either registerglobals or RGEMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.8AI score0.01245EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2006/10/02 12:00 a.m.128 views

SimpleBoard-1.1.0.txt

Hello, the same problem is in the File imageupload.php: http://website.com/components/comsimpleboard/imageupload.php?sbp=evilscript Best Regards, Christian Haeussler -----Ursprüngliche Nachricht----- Von: [email protected] mailto:[email protected] Gesendet: Sonntag, 10. September 2006...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2006/09/29 12:00 a.m.53 views

com_ugbannerspos Remote File Include Vulnerabilities

-------------------------------------------------------------------------------- Title : comugbannerspos Remote File Include Vulnerabilities -------------------------------------------------------------------------------- Author: CrackersChild cont@ct: [email protected]...

3.8AI score
SaveExploits0
securityvulns
securityvulns
added 2006/09/28 12:00 a.m.130 views

bug com_madeira

lintah|adv|02@2006=========mambo-commadeira===php injek by : iFX a.k.a inversFX [email protected] [email protected] [email protected] ------------------------------- locate : Indonesia, Jakarta -------------------------------- date : 21/09/2006 -------------------------------- title : php backdoo...

7AI score
SaveExploits0
NVD
NVD
added 2006/09/27 11:07 p.m.30 views

CVE-2006-5044

Unspecified vulnerability in Prince Clan Princeclan Chess component compcchess 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors...

7.5CVSS6.6AI score0.02001EPSS
SaveExploits1References2
CVE
CVE
added 2006/09/27 11:00 p.m.70 views

CVE-2006-5044

Technical details are not publicly available in the provided documents. No affected products, impact, vectors, or fixes are specified. Monitor for updates.

7.5CVSS7AI score0.02001EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2006/09/27 11:00 p.m.30 views

CVE-2006-5044

Unspecified vulnerability in Prince Clan Princeclan Chess component compcchess 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors...

6.6AI score0.02001EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2006/09/26 12:00 a.m.27 views

Mambocom_hotornot-1.2.2.txt

------=Part26246633113660.1158601122097 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Mambo comhotornot open u'r browser http://victim.xxx/components/comhotornot/uploadfile.php? - upload u'r shell c99shell.php or r57shell.p...

7.4AI score
SaveExploits0
NVD
NVD
added 2006/09/19 6:07 p.m.29 views

CVE-2006-4858

PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat comserverstat 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

6.8CVSS7.6AI score0.06887EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2006/09/19 6:00 p.m.26 views

CVE-2006-4858

PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat comserverstat 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

7.6AI score0.06887EPSS
SaveExploits2References7
CVE
CVE
added 2006/09/19 6:00 p.m.499 views

CVE-2006-4858

CVE-2006-4858 is a PHP remote file inclusion vulnerability in the install.serverstat.php file of the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo, allowing an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter. The provided docu...

6.8CVSS7.6AI score0.06887EPSS
SaveExploits2References7Affected Software1
zdt
zdt
added 2006/09/16 12:00 a.m.366 views

Mambo com_registration_detailed <= 4.1 Remote File Include

Exploit for unknown platform in category web applications ========================================================== Mambo comregistrationdetailed ghoz, homeedition2001, iFX, and for all friend's&enemy 0day.today 2018-02-16...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/09/16 12:00 a.m.114 views

Mambo Component com_registration_detailed 4.1 - Remote File Inclusion

Mambo comregistrationdetailed ghoz, homeedition2001, iFX, and for all friend's&enemy milw0rm.com 2006-09-16...

7.5CVSS5.8AI score0.02425EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2006/09/16 12:00 a.m.51 views

limbolite.txt

Hello Title : Limbo - Lite Mambo CMS Multiple Vulnerabilities Remote File including - Full path - make php shell - and create folder with 0777 permissions Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] // Remote File Including...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2006/09/16 12:00 a.m.303 views

mamboserverstat044.txt

=-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= + +Mambo comserverstat Component =0.4.4 Remote File Include Vulnerability + =-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-==-= + +Author: xoron turkish hacker +...

7.4AI score
SaveExploits0
Rows per page
Query Builder