1915 matches found
CVE-2006-0871
Directory traversal vulnerability in the setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the moschangetemplate parameter. NOTE: CVE-2006-1794 has been assigned to the SQL injection vector...
CVE-2006-0871
CVE-2006-0871 (Mambo 4.5.3/4.5.3h and earlier): directory traversal in _setTemplate via mos_change_template parameter could allow remote reading of arbitrary files. Related entries note an updated Mambo release; exploits reference local file inclusion/remote impact in multiple components. CVE-200...
HYSA-2006-003 Oi! Email Marketing 3.0 SQL Injection
------------------------------------------------------ HYSA-2006-003 h4cky0u.org Advisory 012 ------------------------------------------------------ Date - Thu Feb 24 2006 TITLE: ====== Oi! Email Marketing 3.0 SQL Injection SEVERITY: ========= High SOFTWARE: ========= Oi! Email Marketing 3.0. Pri...
how to crash apache/php in cpanel
I am really not sure if this is a cpanel, php, or apache problem but will let others find out. This is the entire reason I am supplying this information.... In a recent post concerning a mambo error message: Warning: obstart: output handler 'obgzhandler' cannot be used after 'URL-Rewriter' in...
Mambo Undisclosed Authentication Bypass
Binary data 3444.prm...
CVE-2005-4156
Unspecified vulnerability in Mambo 4.5 1.0.0 through 4.5 1.0.9, with magicquotesgpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character...
CVE-2005-4156
Unspecified vulnerability in Mambo 4.5 1.0.0 through 4.5 1.0.9, with magicquotesgpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character...
CVE-2005-4156
CVE-2005-4156 affects Mambo 4.5 (1.0.0) through 4.5 (1.0.9) with magic_quotes_gpc disabled. A remote attacker can read arbitrary files and potentially cause a denial of service via a query string that ends with a NULL character. Root cause: input handling vulnerability allowing unintended file ac...
[EXPL] Mambo Variable Command Execution (Exploit, mosConfig_absolute_path)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-3738
globals.php in Mambo Site Server 4.0.14 and earlier, when registerglobals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfigabsolutepath parameter to content.html.php for remote PHP file inclusion...
CVE-2005-3738
globals.php in Mambo Site Server 4.0.14 and earlier, when registerglobals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfigabsolutepath parameter to content.html.php for remote PHP file inclusion...
CVE-2005-3738
CVE-2005-3738 affects Mambo Site Server 4.0.14 and earlier. When register_globals is disabled, globals.php can be manipulated to overwrite the GLOBALS array, enabling remote attackers to trigger various attacks, including a remote PHP file inclusion demonstrated via mosConfig_absolute_path in con...
Mambo 4.5.2 - Globals Overwrite Remote Command Execution
Mambo 4.5.2 - Globals Overwrite Remote Command Execution Mambo body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: F...
Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit
Exploit for unknown platform in category web applications ================================================================== Mambo Mambo body bac...
Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit
No description provided by source. ?php ---mambo452xpl.php 15.19 17/11/2005 Mambo = 4.5.2 Globals overwrite / remote commands execution coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Rapidity is the essence of war: take...
VulnCheck KEV: CVE-2005-3738
globals.php in Mambo Site Server 4.0.14 and earlier, when registerglobals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfigabsolutepath parameter to content.html.php for remote PHP file inclusion...
Mambo 4.5.2 - Globals Overwrite / Remote Command Execution
Mambo body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF !important input background-color: 303030...
Mambo Open Source / Joomla! GLOBALS Variable Remote File Include
The version of Mambo Open Source or Joomla! running on the remote host is affected by a remote file include vulnerability due to allowing the the GLOBALS variable array to be overwritten whenever the PHP 'registerglobals' setting is disabled. An unauthenticated, remote attacker can exploit this...
mambo -- "register_globals" emulation layer overwrite vulnerability
A Secunia Advisory reports: peter MC tachatte has discovered a vulnerability in Mambo, which can be exploited by malicious people to manipulate certain information and compromise a vulnerable system. The vulnerability is caused due to an error in the "registerglobals" emulation layer in...