1915 matches found
Mambo 4.5 Server user.php Script Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9193/info It has been reported that Mambo Server may be prone to an unauthorized access vulnerability that may allow an attacker to modify a user and/or an administrator's information such as password, email, name etc,...
HTMLArea3 Mambo Module <= 1.5 - Remote Include Vulnerability
No description provided by source. HTMLArea3 addon - ImageManager Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From Remote...
Mambo LMTG Myhomepage 1.2 Component Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19584/info The lmtgmyhomepage component for Mambo is prone multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitra...
Joomla! and Mambo com_detail Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27853/info The Joomla! and Mambo 'comdetail' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
Mambo EstateAgent 1.0.2 Component mosConfig_absolute_path Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19625/info The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
Mambo Open Source 4.5 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9890/info It has been reported that the Mambo 'index.php' script is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. This issue...
Mambo Open Source 4.5 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9891/info It has been reported that the Mambo 'index.php' script is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. As a result of...
Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability
No description provided by source. ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...
Joomla / Mambo Component com_ezine 2.1 - Remote File Include Vulnerability
No description provided by source. Joomla / Mambo Component comezine Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 20 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /|...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array ReadMakernoteTag = array , getMakernoteTextValue = array , InterpretMakernotetoHTML = array ; // Include th...
Mambo Open Source 4.5.1 (1.0.9) - Function.php Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may...
Prince Clan Chess Club 0.8 Include.PCchess.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19138/info Prince Clan Chess Club for Mambo is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...
Joomla! and Mambo com_scheduling Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27830/ The Joomla! and Mambo 'comscheduling' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
Joomla Mosets Tree <= 1.0 - Remote File Include Vulnerability
No description provided by source. !!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Joomla Mosets Tree = 1.0 Remote File Include Vulnerability...
Mambo cropimage Component <= 1.0 - Remote File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class MambocropimageComponentRemoteFileIncludePOCBase: vulID = '63857' version = '1' vulDate = '2006-08-19'...
Mambo <= 4.5.2.1 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl Mambo = 4.5.2.1, MySQL = 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 3 $server = $ARGV0; $path = $ARGV1; $memberid = $ARGV2; $newsid = 1; $newsitemid = 1; $server =...
Mambo Site Server 4.0.14 banners.php bid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...
Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n; echo disclosure exploit ii quicker and more effective version, but it floods\r\n; echo admin of links submissions...\r\n; echo by rgod...
Mambo Peoplebook Component 1.0 - Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- Peoplebook Mambo Component = v1.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 14th 20...
Joomla! and Mambo 'com_smslist' Component - 'listid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27818/info The Joomla! and Mambo 'comsmslist' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...