Mambo Component Mam-Moodle alpha - Remote File Inclusion

Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path: ?mosConfigabsolutepath= xpl:...

Mambo Component MoSpray 18RC1 - Remote File Inclusion

Kurdish Security MoSpray Remote File Include Vulnerability Original Advisory : http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : MoSpray Site :...

Mambo Component multibanners 1.0.1 - Remote File Inclusion

SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz, http://blue-spy.net Greetz: h4ntu , Fungky, Solpot, Matdhu...

CVE-2006-3773

The CVE-2006-3773 entry describes a PHP remote file inclusion in the SMF-Forum Bridge component (com_smf) used by SMF-Forum 1.3.1.3 for Joomla! and Mambo 4.5.3+. The vulnerability stems from the mosConfig_absolute_path parameter, which can be supplied via a URL to cause arbitrary PHP code executi...

CVE-2006-3736

PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3749

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component comsitemap 2.0.0 for Mambo 4.5.1 CMS, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3749

The CVE-2006-3749 vulnerability affects the Mambo/ Joomla! component com_sitemap (Sitemap) version 2.0.0 on Mambo 4.5.1, via the mosConfig_absolute_path parameter when register_globals is enabled. Root cause: improper sanitization of user input leading to remote PHP code execution. Impact: allows...

CVE-2006-3748

CVE-2006-3748 affects the LoudMouth component for Mambo (4.0j and possibly 4.1) via the file includes/abbc/abbc.class.php. The vulnerability arises from using the mosConfig_absolute_path parameter to include a remote file, enabling an attacker to execute arbitrary PHP code on a vulnerable server....

CVE-2006-3749

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component comsitemap 2.0.0 for Mambo 4.5.1 CMS, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3748

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3736

PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3736

The CVE-2006-3736 entry describes a PHP remote file inclusion in VideoDB’s core/videodb.class.xml.php for Mambo 0.3 and earlier. The vulnerability allows an attacker to trigger remote PHP code execution by supplying a URL in the mosConfig_absolute_path parameter. Affected component: VideoDB (Mamb...

pc_cookbook Mambo Component <= 0.3 Include Vulnerability

Exploit for unknown platform in category web applications ======================================================== pccookbook Mambo Component = 0.3 Include Vulnerability ========================================================...

pollxt Mambo Component &lt;= 1.22.07 Remote Include Vulnerability

No description provided by source. Application : pollxt mambo Component URL : http://www.mamboxt.com Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/compollxt/conf.pollxt.php on line 1-2...

Mambo Component com_hashcash 1.2.1 - Remote File Inclusion

Mambo Component comhashcash 1.2.1 - Remote File Inclusion Hashcash Component Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From...

Mambo Component com_loudmouth 4.0j - Remote File Inclusion

Mambo Component comloudmouth 4.0j - Remote File Inclusion Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...

Mambo Module Calendar 1.5.7 - Com_Calendar.php Remote File Inclusion

Mambo Module Calendar 1.5.7 - ComCalendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/19027/info The Calendar module for Mambo is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

com_loudmouth Mambo Component &lt;= 4.0j Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...

Mambo Component pc_cookbook 0.3 - Remote File Inclusion

Mambo Component pccookbook 0.3 - Remote File Inclusion --------------------------------------------------------------------------------- pccookbook Joomla Component = v0.3 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author ...

com_extcalendar Mambo Component <= 2.0 Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ comextcalendar Mambo Component = 2.0 Include Vulnerability ============================================================...