Mambo Foundation Mambo Cms vulnerabilities
5 vulnerabilities
Known vulnerabilities in Mambo Foundation Mambo Cms, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-2565mambo-foundationmambo_cms+1
EPSS score1.60%
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.CVE-2013-2562mambo-foundationmambo_cmsEPSS score0.47%
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.CVE-2013-2563mambo-foundationmambo_cmsEPSS score0.46%
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.CVE-2013-2564mambo-foundationmambo_cmsEPSS score2.46%
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.CVE-2011-2499mambo-foundationmambo_cms+1EPSS score0.65%
Mambo CMS through 4.6.5 has multiple XSS.