Mambo CMS Suffers From File Inclusion Vulnerability

Mambo CMS Suffers From File Inclusion Vulnerability

Note: This article will be emailed to your friend.

Kw3[R]Ln has discovered a vulnerability in the MOD_CBSMS module for Mambo, which can be exploited to compromise a machine serving Mambo CMS.

Input passed to the “mosConfig_absolute_path” parameter in mod_cbsms_messages.php isn’t properly verified, before it is used to include files. This can be exploited to include arbitrary files from external and local resources.
Successful exploitation requires that [...]

Read the rest of this article (108 words)

Please fill in the following fields

* - Required

Your Name: *

Your E-Mail: *

Your Remarks:

Friend's Name: *

Friend's E-Mail: *

Protected by Comment Guard Pro