limbo cms limbo cms 1.0.4.2 vulnerabilities and exploits

(subscribe to this query)

Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and previous versions allows remote malicious users to upload PHP code to the images/contact folder via a filename with a double extension in t...

Limbo Cms Limbo Cms 1.0.4.1 Limbo Cms Limbo Cms 1.0.4.2 Limbo Cms Limbo Cms 1.0.4.2l

1 EDB exploit

Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antihack.php, (10) content.php, (11) initglobals.php, and (12) imanager.php in Limbo (a...

Limbo Cms Limbo Cms 1.0.4.2 Limbo Cms Limbo Cms 1.0.4.2l Limbo Cms Limbo Cms 1.0.4.1

The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote malicious users to execute arbitrary PHP commands via the Itemid parameter in index.php.

Limbo Cms Limbo Cms 1.0.4.1 Limbo Cms Limbo Cms 1.0.4.2

2 EDB exploits

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the classes_dir parameter.

Limbo Cms Limbo Cms 1.0.4 Limbo Cms Limbo Cms 1.0.4.2

1 EDB exploit

Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote malicious users to inject arbitrary web script or HTML via the message field in the Contact Form.

Limbo Cms Limbo Cms 1.0.4.2

Cross-site scripting (XSS) vulnerability in admin.php in Limbo CMS 1.0.4.2 allows remote malicious users to inject arbitrary web script or HTML via the com_option parameter.

Limbo Cms Limbo Cms 1.0.4.2

1 EDB exploit

SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote malicious users to execute arbitrary SQL commands via the catid parameter.

Limbo Cms Limbo Cms 1.0.4.2

1 EDB exploit

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote malicious users to execute arbitrary SQL commands via the cuid cookie parameter to admin.php.

Limbo Cms Limbo Cms

1 EDB exploit

Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and previous versions allows remote malicious users to include arbitrary PHP files via ".." sequences in the option parameter.

Limbo Cms Limbo Cms

1 EDB exploit

Limbo CMS 1.0.4.2 and previous versions, with register_globals off, does not protect the $_SERVER variable from external modification, which allows remote malicious users to use the _SERVER[REMOTE_ADDR] parameter to (1) conduct cross-site scripting (XSS) attacks in the stats modu...

Limbo Cms Limbo Cms

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook