CVE-2008-7214

Cross-site request forgery CSRF vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a comusers action, as...

CVE-2008-7212

MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php, which reveals the installation path in an error message...

CVE-2008-7215

The CVE-2008-7215 entry concerns MOStlyCE (MOStlyContent Editor) as used in Mambo 4.6.3 and earlier. The Image Manager of MOStlyCE before version 2.4 allows remote attackers to rename arbitrary files and trigger a denial of service by sending modified file[NewFile][name], file[NewFile][tmp_name],...

CVE-2008-7214

The CVE-2008-7214 entry describes a CSRF flaw in MOStlyCE before 2.4 (used in Mambo 4.6.3 and earlier) affecting administrator/index2.php. The vulnerability lets remote attackers hijack an administrator’s session to add new administrator accounts via the save task in a com_users action, with the ...

Mambo Hestar SQL Injection

comhestar 1.0.0 Author : M3NW5 M3NW5athackermaildotcom Homepage : http://www.indonesiancoder.com Date : Monday, Semptember 07, 2009 ------------------------------------------------------------------------------------------------------- | |.-----..--| |.-----..-----..-----..-----.||.---.-..-----. ...

Mambo Component com_hestar Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Mambo Component comhestar Remote SQL Injection Vulnerability =============================================================...

Mambo Component Hestar - SQL Injection

Mambo Component Hestar - SQL Injection comhestar 1.0.0 Author : M3NW5 M3NW5athackermaildotcom Homepage : http://www.indonesiancoder.com Date : Monday, Semptember 07, 2009 ------------------------------------------------------------------------------------------------------- | |.-----..--|...

Mambo Component com_hestar Remote SQL Injection Vulnerability

No description provided by source. comhestar 1.0.0 Author : M3NW5 M3NW5athackermaildotcom Homepage : http://www.indonesiancoder.com Date : Monday, Semptember 07, 2009 ------------------------------------------------------------------------------------------------------- | |.-----..--|...

Mambo Component Hestar - SQL Injection

comhestar 1.0.0 Author : M3NW5 M3NW5athackermaildotcom Homepage : http://www.indonesiancoder.com Date : Monday, Semptember 07, 2009 ------------------------------------------------------------------------------------------------------- | |.-----..--| |.-----..-----..-----..-----.||.---.-..-----. ...

Mambo Component com_zoom (catid) Blind SQL Injection Vulnerability

No description provided by source. Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN Keep my head up high for that flag i...

Mambo Component com_zoom (catid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mambo Component comzoom catid Blind SQL Injection Vulnerability ================================================================== Mambo component comzoom catid Blind SQL...

Mambo Component com_zoom - catid Blind SQL Injection

Mambo Component comzoom - catid Blind SQL Injection Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' zoom 20/01/2004 Mike de Boer [email protected] www.mikedeboer.nl 2.0/vers...

Mambo Zoom Blind SQL Injection

Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' zoom 20/01/2004 Mike de Boer [email protected] www.mikedeboer.nl 2.0 ------------------------------------------------------------------- SQLi :...

Mambo Component com_zoom - 'catid' Blind SQL Injection

Mambo component comzoom catid Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' zoom 20/01/2004 Mike de Boer [email protected] www.mikedeboer.nl 2.0 ------------------------------------------------------------------- SQLi :...

Joomla Amocourse SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comamocourse catid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Greetz : d4n1ux +...

Joomla Component com_amocourse (catid) SQL-injection Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comamocourse catid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Greetz : d4n1ux +...

Joomla Component com_amocourse (catid) SQL Injection Vuln

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comamocourse catid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email :...

Joomla Component com_tickets <= 2.1 (id) SQL Injection Vuln

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comtickets id SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email :...

Joomla Tickets 2.1 SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comtickets id SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Greetz : d4n1ux +...

Joomla! Component com_tickets 2.1 - 'id' SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comtickets id SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Greetz : d4n1ux +...