Mambo com_koesubmit 1.0.0 - Remote File Inclusion

No description provided by source. Mambo comkoesubmit 1.0.0 Remote File Inclusion Author : Don Tukulesto rootatindonesiancoderdotcom Homepage : http://www.indonesiancoder.com Date : Friday, Semptember 18, 2009...

com_flyspray Mambo Com. <= 1.0.1 - Remote File Disclosure Vulnerability

No description provided by source. | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1...

Joomla! and Mambo faq Component - 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

Joomla! and Mambo 'ensenanzas' Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Mambo Open Source 4.5/4.6 mod_mainmenu.php Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9445/info It has been reported that Mambo Open Source may be prone to a remote file include vulnerability that may allow an attacker to include malicious external files containing arbitrary PHP code to be executed on a...

Mambo EstateAgent 1.0.2 Component mosConfig_absolute_path Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19625/info The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

com_loudmouth Mambo Component <= 4.0j - Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...

Joomla! and Mambo 'com_joomlavvz' Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27921/info The Joomla! and Mambo 'comjoomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

SimpleBoard Mambo Component <= 1.1.0 - Remote Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6920/Simpleboard-1.1.0-Stable.zip bug found in file fileupload.php : requireonce$sbp/sbhelpers.php;...

Joomla! and Mambo com_filebase Component - 'filecatid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27829/info The Joomla! and Mambo 'comfilebase' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit

No description provided by source. ?php ---mambo452xpl.php 15.19 17/11/2005 Mambo = 4.5.2 Globals overwrite / remote commands execution coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: Rapidity is the essence of war: take...

com_videodb Mambo Component <= 0.3en Remote Include Vulnerability

No description provided by source. comvideodb Mambo Componenet = 0.3en Remote Include Vulnerability Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7942/comvideodbv0.3en.zip bug found i...

Mambo Open Source 4.5 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9891/info It has been reported that the Mambo 'index.php' script is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. As a result of...

mambo/joomla component article 1.1 - Remote File Inclusion Vulnerability

No description provided by source. ======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected]...

Mambo Open Source 4.0.14 PollBooth.PHP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9197/info Mambo Open Source is prone to SQL injection attacks. This is due to an input validation error in 'pollBooth.php'. In particular, various user-supplied variables are used in an SQL query without proper sanitizati...

Joomla! and Mambo com_formtool Component - 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27884/info The Joomla! and Mambo 'comformtool' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla! and Mambo 'com_smslist' Component - 'listid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27818/info The Joomla! and Mambo 'comsmslist' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Mambo Open Source 4.0.14 Server SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9196/info It has bee reported that Mambo Open Source 4.0.14 Server is prone to SQL injection attacks. The problem is said to occur due to insufficient sanitization of data passed to specific index.php variables. As a...

Mambo Open Source 4.6.2 mambots/editors/mostlyce/ .. /php/connector.php Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Mambo Open Source 4.5 index.php mos_change_template Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/9890/info It has been reported that the Mambo 'index.php' script is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. This issue...