CVE-2006-7104

The CVE-2006-7104 entry describes a PHP remote file inclusion vulnerability in MOStlyContent Editor (MOStlyCE) for Mambo 4.5.4. The flaw is in htmltemplate.php where remote code execution is possible via a URL supplied to the mosConfig_absolute_path parameter, enabling an attacker to run arbitrar...

CVE-2008-2500

MOStlyContent Editor (MOStlyCE) for Mambo, prior to version 3.0, is affected by a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The documents do not specify affected build numbers beyond “before 3.0,” no...