EUVD-2006-6032

Malware in sbrugna...

CVE-2008-0606

SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...

Sql injection

SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...

CVE-2008-0606

SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...

CVE-2008-0606

CVE-2008-0606 describes a SQL injection vulnerability in the Shambo2 (com_shambo2) component used by Mambo and Joomla!. The vulnerability is triggered in index.php via the Itemid parameter, allowing remote attackers to execute arbitrary SQL commands. Multiple sources (NVD, CVE lists, Prio) consis...

CVE-2008-0606: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Shambo2 comshambo2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter...

CVE-2006-6049

CVE-2006-6049 affects the Shambo2 (com_shambo2) component for Mambo 4.5. The vulnerability is a PHP remote file inclusion in shambo2.php, exploitable via a URL parameter mosConfig_absolute_path, enabling arbitrary PHP code execution. Root cause: unvalidated/unsafely used parameter allowing inclus...

CVE-2006-6049: Undefined Security Weakness

PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 comshambo2 component for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-6049

PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 comshambo2 component for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...