CVE-2006-4263

Summary (CVE-2006-4263) Multiple PHP remote file inclusion vulnerabilities affect mambo-phpshop (com_phpshop) for Mambo/Joomla! via the mosConfig_absolute_path parameter in eight modules: mod_phpshop.php, mod_phpshop_allinone.php, mod_phpshop_cart.php, mod_phpshop_featureprod.php, mod_phpshop_lat...

CVE-2006-4269

CVE-2006-4269 concerns the com_x-shop (x-shop) component for Mambo/Joomla!, affected versions 1.7 and earlier. The vulnerability is described as a PHP remote file inclusion via a URL in the mosConfig_absolute_path parameter, potentially allowing remote code execution. The issue is disputed by thi...

CVE-2006-4263

Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop comphpshop for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 modphpshop.php, 2 modphpshopallinone.php...

CVE-2006-4242

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4242

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4241

PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component comreporter allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4242

CVE-2006-4242 affects the JIM 1.0.1 component for Joomla/Mambo, with a vulnerability in install.jim.php that allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. The root cause is a PHP remote file inclusion in the install script, enabling arbi...

CVE-2006-4241

CVE-2006-4241 affects the Mambo component com_reporter, specifically the processor/reporter.sql.php file. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter. The CVSS base score is 7.5 ...

PT-2006-5058 · Mambo Joomla · Jim

Name of the Vulnerable Software and Affected Versions: JIM component for Joomla or Mambo version 1.0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter in the install.jim.php file. Recommendations: For version 1.0.1,...

Ako Comments (mod) Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Ako Comments mod Attack method: Remote File Inclusion Source: Description: This module shows users' comments from component AkoComments. File Version: 1.1 for Mambo 4...

Mambo jim Component Remote Include Vulnerability

C Y B E R - W A R R I O R T I M Mambo jim Component Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: in install.jim.php , line 16 requireonce$mosConfigabsolutepath."/components/comjim/readme.txt"; Exploit:...

anjel Mambo Component Remote File Include

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : anjel Mambo Component Remote File Include Vulnerabilities -------------------------------------------------------------------------------- Author: CrackersChild...

PT-2006-5074 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo com lmtg myhomepage component affected versions not specified Description: The issue concerns multiple PHP remote file inclusion vulnerabilities in the com lmtg myhomepage component for Mambo. These vulnerabilities allow remote attacker...

Mambo Component Display MOSBot Manager - MosConfig_absolute_path Remote File Inclusion

Mambo Component Display MOSBot Manager - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/19621/info The Mambo Display MOSBot Manager component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attack...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/"...

PT-2006-5089 · Mambo · Anjel

Name of the Vulnerable Software and Affected Versions: ANJEL formerly MaMML Component com anjel for Mambo affected versions not specified Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter...

Mambo com_cropimage 1.0 Component Remote Include Vulnerability

C Y B E R - W A R R I O R T I M Mambo comcropimage 1.0 Component Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: in admin.cropcanvas.php , line 7 requireonce $cropimagedir."class.cropinterface.php"; Fix: 1-open admin.cropcanvas.php 2-add this code befo...

Joomla RFİ ( ERNE )

ERNE ---- ERNEALZM ---- BU ASK BiTMEZ---- Mambo jim Component - Remote File Include Vulnerabilities Credits : ERNE Risk : High Class: Remote Thanks : EntRika, Liz0zim, Rmx, Dengesiz, DiLejyoner AND irc.gigachat.net kurdhack contact: erneaternealizmdotcom Vulnerable :...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...

Mambo CatalogShop Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo CatalogShop Attack method: Remote File Inclusion Descriptio : This is a modified version of the FacileForms mambot, which allows you to add and view user commen...