Description
Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) image_upload.php and (2) file_upload.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion EDB-1994 · webapps · Jul 8, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20060909 SimpleBoard Mambo Component 1.1.0 Remote File Include mailing-list
- 18917 vdb-entry
- 20060920 Re: SimpleBoard Mambo Component 1.1.0 Remote File Include mailing-list
- 28531 vdb-entry
- 1016824 vdb-entry
- ADV-2006-2716 vdb-entry
- 1994 exploit
- 27421 vdb-entry
- 20981 third-party-advisory