CVE-2003-1245

index2.php in Mambo 4.0.12 allows remote attackers to gain administrator access via a URL request where sessionid is set to the MD5 hash of a session cookie...

CVE-2003-1245

The CVE-2003-1245 issue affects Mambo Site Server (CMS) in version 4.0.12, where index2.php allows a remote attacker to gain administrator access by sending a URL with session_id set to the MD5 hash of a valid session cookie. Root cause is improper validation of cookies, enabling session imperson...

CVE-2005-3586

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error...

CVE-2005-3586

The CVE-2005-3586 issue affects Mambo 4.5.2 through 4.5.2.3. The vulnerability allows remote attackers to discover the installation path by triggering an error-response URL, as described in multiple sources including PT-2005-4372. There is no publicly detailed exploit description beyond this beha...

[Full-disclosure] mambo remote code sexecution

a vulnerability exist in globals.php when registerglobals is off and allow remote code inclusion this a GLOBALS overwrite in components/comcontent/content.html.php there is the line: requireonce $GLOBALS'mosConfigabsolutepath' . '/includes/HTMLtoolbar.php' ; ok da globals.php: if...

PT-2005-4372 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo versions 4.5.2 through 4.5.2.3 Description: The issue allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. Recommendations: For Mambo versions 4.5.2 through...

Mambo Open Source, Path disclosure

KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...

Mambo Site Server index.php mos_change_template XSS

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: mamboxss3.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: Mambo Site Server index.php moschangetemplate XSS Authors: David Maciejak Updated:...

Mambo Site Server XSS and remote arbitrary code execution

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. OpenVAS Vulnerability Test $Id: mamboflaws.nasl 9087 2018-03-12 17:24:24Z cfischer $...

Mambo Site Server 4.0.10 XSS

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: mamboxss.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: Mambo Site Server 4.0.10 XSS Authors: K-Otik.com Updated: 04/07/2009 Antu Sanadi...

Mambo Site Server XSS and Remote Arbitrary Code Execution Vulnerabilities (Jan 2003) - Active Check

An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpte...

Mambo Site Server index.php mos_change_template XSS Vulnerability - Active Check

An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting XSS attack on this host. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mambo Site Server 4.0.10 XSS Vulnerability - Active Check

An attacker may use the installed version of Mambo Site Server to perform a cross site scripting attack on this host. SPDX-FileCopyrightText: 2003 k-otik.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[Full-disclosure] GeSHi Local PHP file inclusion 1.0.7.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GeSHi Local PHP file inclusion 1.0.7.2 Author: Maksymilian Arciemowicz cXIb8O3 .17 Date: 21.9.2005 from SECURITYREASON.COM - --- 0.Description --- GeSHi started as a mod for the phpBB forum system, to enable highlighting of more languages than the...

CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 1.09 and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the comremository option...

CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module for Mambo Portal 4.5.1 (1.09) and earlier, exploitable via the filecatid parameter in the com_remository option. Root cause: improper handling of user-supplied input in that component. Impact: allows remote execution of arbitrary ...

Mambo <= 4.5.2.1 SQL Injection Exploit

No description provided by source. !/usr/bin/perl Mambo = 4.5.2.1, MySQL = 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 3 $server = $ARGV0; $path = $ARGV1; $memberid = $ARGV2; $newsid = 1; $newsitemid = 1; $server =...

Mambo 4.5.2.1 - SQL Injection

Mambo 4.5.2.1 - SQL Injection !/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...

Mambo <= 4.5.2.1 SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================== Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE...

Mambo 4.5.2.1 - SQL Injection

!/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...