EUVD-2007-2039

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in modweather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2007-2044

CVE-2007-2044 : Affected environment is the Antonis Ventouris Weather module for Mambo/Joomla! (mod_weather.php). The issue is a PHP remote file inclusion via an unvalidated absolute_path parameter, allowing an attacker to cause the web server to execute arbitrary PHP code. Root cause: improper i...

Mambo Module Weather - absolute_path Remote File Inclusion

Mambo Module Weather - absolutepath Remote File Inclusion ============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected]...