CVE

Id
14942  
CVE No.
CVE-2005-3738  
Status
Candidate  
Description
globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.  
Phase
Assigned (20051122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
115737 14942 CVE-2005-3738 FULLDISC:20051116 mambo remote code sexecution  View
115738 14942 CVE-2005-3738 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0520.html  View
115739 14942 CVE-2005-3738 BUGTRAQ:20051118 Mambo 0day Exploit out in the wild - mambo/skype hacked  View
115740 14942 CVE-2005-3738 URL:http://www.securityfocus.com/archive/1/417215  View
115741 14942 CVE-2005-3738 CONFIRM:http://forum.mamboserver.com/showthread.php?t=66154  View
115742 14942 CVE-2005-3738 BUGTRAQ:20060307 PHP-based CMS mass-exploitation  View
115743 14942 CVE-2005-3738 URL:http://www.securityfocus.com/archive/1/archive/1/426942/100/0/threaded  View
115744 14942 CVE-2005-3738 BUGTRAQ:20060308 RE: [Full-disclosure] PHP-based CMS mass-exploitation  View
115745 14942 CVE-2005-3738 URL:http://www.securityfocus.com/archive/1/archive/1/427196/100/0/threaded  View
115746 14942 CVE-2005-3738 BID:15461  View
115747 14942 CVE-2005-3738 URL:http://www.securityfocus.com/bid/15461  View
115748 14942 CVE-2005-3738 VUPEN:ADV-2005-2473  View
115749 14942 CVE-2005-3738 URL:http://www.vupen.com/english/advisories/2005/2473  View
115750 14942 CVE-2005-3738 SECTRACK:1015258  View
115751 14942 CVE-2005-3738 URL:http://securitytracker.com/id?1015258  View
115752 14942 CVE-2005-3738 SECUNIA:17622  View

Related JVN