CVE-2006-3749

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component comsitemap 2.0.0 for Mambo 4.5.1 CMS, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3749

The CVE-2006-3749 vulnerability affects the Mambo/ Joomla! component com_sitemap (Sitemap) version 2.0.0 on Mambo 4.5.1, via the mosConfig_absolute_path parameter when register_globals is enabled. Root cause: improper sanitization of user input leading to remote PHP code execution. Impact: allows...

Sitemap Mambo Component <= 2.0.0 Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= Sitemap Mambo Component = 2.0.0 Remote Include Vulnerability ============================================================= Sitemap 2.0.0 for Mambo 4.5.1 CMS Author : Ahmad Maula...

Mambo Component Sitemap 2.0.0 - Remote File Inclusion

Mambo Component Sitemap 2.0.0 - Remote File Inclusion Sitemap 2.0.0 for Mambo 4.5.1 CMS Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access...

Mambo Component Sitemap 2.0.0 - Remote File Inclusion

Sitemap 2.0.0 for Mambo 4.5.1 CMS Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From Remote...

[ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities

ECHOADV38$2006 ----------------------------------------------------------------------------------------------- ECHOADV38$2006 Multiple Mambo/Joomla Component Remote File Include Vulnerabilities ----------------------------------------------------------------------------------------------- Author ...

CVE-2006-3172

Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash / character in the 1 langpath parameter to a cms/plugins/colman/column.inc.php, b cms/plugins/poll/poll.inc.php, c...

Remote file inclusion

PHP remote file inclusion vulnerability in METAjour 2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 systempath parameter in a large number of files in the a app/edocument/, b app/eproject/, c app/erek/, and d extension/ directories, and the 2...