CveMateVulnerability intelligence

Mambo vulnerabilities, page 2

78 vulnerabilities

Known vulnerabilities in Mambo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 67 products.

CVE-2008-2500mambomostlyce18y ago29-05-2008 16:00

Cross-site scripting (XSS) vulnerability in the MOStlyContent Editor (MOStlyCE) component before 3.0 for Mambo allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-2905mambomambo18y ago30-06-2008 18:00

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.CVE-2008-2095joomlacom_flippingbook+218y ago06-05-2008 16:00

SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter.CVE-2008-1540joomladatsogallery+118y ago28-03-2008 18:00

SQL injection vulnerability in the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.CVE-2008-1137joomlacom_garyscookbook+118y ago04-03-2008 20:00

SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.CVE-2008-1297ewritingewriting+218y ago12-03-2008 17:00

SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action.CVE-2008-0832joomlakemas_antonius_com_quran+118y ago20-02-2008 19:00

SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the surano parameter in a viewayat action.CVE-2008-0519joomlacom_jokes+118y ago31-01-2008 19:30

SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a CatView action.CVE-2008-0510mambomambo18y ago31-01-2008 19:30

SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter.CVE-2008-0799joomlacom_quiz+118y ago15-02-2008 21:00

SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action.CVE-2008-0517darko_selesiestateagent+118y ago31-01-2008 19:30

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action.CVE-2008-0686joomlacom_neoreferences+118y ago12-02-2008 00:00

SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter.CVE-2008-0795joomlajoomla\!+218y ago15-02-2008 21:00

SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action.CVE-2008-0518joomlacom_recipes+118y ago31-01-2008 19:30

SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.CVE-2008-0773joomlacom_comments+318y ago13-02-2008 23:00

SQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-0841joomlacom_ricette_component+118y ago20-02-2008 21:00

SQL injection vulnerability in index.php in the Giorgio Nordo Ricette (com_ricette) 1.0 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-0721mambocom_sermon18y ago12-02-2008 01:00

SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter.CVE-2008-0603amazoopawesom+218y ago06-02-2008 11:00

SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task.CVE-2008-0514joomlaglossary+118y ago31-01-2008 19:30

SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action.CVE-2008-0752joomlacom_neogallery+118y ago13-02-2008 19:00

SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action.