Joomla! / Mambo Component Comprofiler 1.0 - 'class.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious P...

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion source: https://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

CVE-2006-4363

In CVE-2006-4363, the CropImage component (com_cropimage) for Mambo 1.0 is affected. The vulnerability is a PHP remote file inclusion in admin.cropcanvas.php, exploitable via a URL in the cropimagedir parameter, allowing arbitrary PHP code execution on the server. Root cause: unvalidated input fr...

CVE-2006-4363

PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component comcropimage 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter...

CVE-2006-4348

PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite comkochsuite 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4348

CVE-2006-4348 affects the Kochsuite component com_kochsuite 0.9.4 for Mambo/Joomla!, where a PHP remote file inclusion vulnerability in config.kochsuite.php allows an attacker to execute arbitrary PHP code via the mosConfig_absolute_path parameter. The connected advisories confirm a file inclusio...

EUVD-2006-4336

PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite comkochsuite 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4321

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component comcpg 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4322

PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component comestateagent for Mambo, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4322

PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component comestateagent for Mambo, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4321

CVE-2006-4321 describes a PHP remote file inclusion in Coppermine Photo Gallery (component com_cpg) 1.0 and earlier for Mambo. An attacker can supply a URL via mosConfig_absolute_path to cause the application to include remote PHP code, enabling arbitrary code execution. The NVD entry notes a CVS...

CVE-2006-4322

CVE-2006-4322 is a PHP remote file inclusion vulnerability in the EstateAgent component (com_estateagent) of Mambo. The issue occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code via a URL supplied to the mosConfig_absolute_path parameter. Affected product/...

CVE-2006-4296

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component combabackup for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfigabsolutepath parameter...

CVE-2006-4296

CVE-2006-4296 is a PHP remote file inclusion vulnerability in Mambo 1.1, specifically within the bigAPE-Backup component (com_babackup) and its Tar.php. The root cause is that the mosConfig_absolute_path parameter can be used by an attacker to include arbitrary files, enabling remote code inclusi...

CVE-2006-4296

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component combabackup for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfigabsolutepath parameter...

CVE-2006-4286

PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component comcontentpublisher for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by third parties who state tha...

CVE-2006-4282

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component commambowiki 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter...

CVE-2006-4286

The CVE concerns the Mambo contentpublisher component (com_contentpublisher) where a PHP remote file inclusion exists via a URL in the mosConfig_absolute_path parameter, enabling arbitrary code execution as described in multiple sources. The most concrete details in the provided documents indicat...

CVE-2006-4282

The vulnerability CVE-2006-4282 affects the MamboWiki component (com_mambowiki) in Mambo/Joomla! up to version 0.9.6. It is a PHP remote file inclusion in MamboLogin.php that allows an attacker to execute arbitrary PHP code via a URL supplied in the IP parameter. This is caused by improper handli...

CVE-2006-4286

PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component comcontentpublisher for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by third parties who state tha...