Mambo Open Source 4.5 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mambo Open Source 4.5, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.4CVE-2005-4156mambomambo_open_source_4.5
EPSS score
1.78%
Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.7.5CVE-2004-1826mambomambo_open_source_4.5
EPSS score
1.23%
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.