1915 matches found
Mambo Content Server < 4.5.1b Detection Global Variables Overwrite
Binary data 2589.prm...
CVE-2004-2143
SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 1.09 and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the comremository option...
CVE-2004-2072
Cross-site scripting XSS vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter...
Vulnerabilities in Mambo
--------------------------------------------------------------------------- Two Vulnerabilities in Mambo --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...
mambo451.txt
Vendor www.mamboportal.com Message from vendor : Mambo is one of the most powerful Open Source Content Management Systems on the planet. It is used all over the world for everything from simple websites to complex corporate applications. Mambo is easy to install, simple to manage, and reliable. B...
mambo45.jose.txt
--------------------------------------------------------------------------- Two Vulnerabilities in Mambo --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...
Mambo Open Source Multiple Input Validation Vulnerabilities
Description Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may leverage these issues to execute arbitrary server-side script code on an...
Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting
Mambo Open Source 4.5.1 1.0.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. ...
Mambo Open Source 4.5.1 (1.0.9) - Function.php Arbitrary Command Execution
Mambo Open Source 4.5.1 1.0.9 - Function.php Arbitrary Command Execution source: https://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate...
Mambo Open Source 4.5.1 (1.0.9) - 'Function.php' Arbitrary Command Execution
source: https://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may leverage these issues to execute...
Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting
source: https://www.securityfocus.com/bid/11220/info Mambo open source is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly validate user-supplied URI parameters. An attacker may leverage these issues to execute...
CVE-2004-1692
Cross-site scripting XSS vulnerability in index.php in Mambo 4.5 1.0.9 allows remote attackers to inject arbitrary web script or HTML via the 1 Itemid, 2 mosmsg, or 3 limit parameters...
CVE-2004-1693
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 1.0.9 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code...
Remository - SQL Injection
Remository - SQL Injection source: https://www.securityfocus.com/bid/11219/info It is reported that the ReMOSitory module for Mambo is prone to an SQL injection vulnerability. This issue is due to a failure of the module to properly validate user supplied URI input. Because of this, a malicious...
Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability.
Vendor www.mamboportal.com Message from vendor : Mambo is one of the most powerful Open Source Content Management Systems on the planet. It is used all over the world for everything from simple websites to complex corporate applications. Mambo is easy to install, simple to manage, and reliable. B...
eaea.class.php.txt
|| Raza Mexicana Hackers Team - http://www.raza-mexicana.org / // Just change this vars ------------------------------ $hackernick = 'hax0r'; $hackerpass = 'eaea'; $basepathurl = "/home/victim/publichtml/"; -- ending slash // ---------------------------------------------------- $body = END ?php...
mambo45.txt
Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...
Mambo Open Source Multiple Vulnerabilities
Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...
CVE-2004-1826
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2004-1825
Cross-site scripting XSS vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 return or 2 moschangetemplate parameters...