Mambo vulnerabilities, page 3
78 vulnerabilities
Known vulnerabilities in Mambo products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 67 products.
LowCVE-2008-3712mambomambo mamboMultiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php and the (2) mosConfig_sitename parameter to administrator/popups/index3pop.php.EPSS1.88%MediumCVE-2011-2499mambo-foundation · mambo_cms +1 moremambo-foundation mambo_cmsMambo CMS through 4.6.5 has multiple XSS.EPSS0.65%HighCVE-2004-2143mambo · mambo_portalmambo mambo_portalSQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option.EPSS1.75%MediumCVE-2004-2072mambo · mambo_open_sourcemambo mambo_open_sourceCross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.EPSS4.18%MediumCVE-2004-1692mambo · mambo_open_sourcemambo mambo_open_sourceCross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.EPSS1.79%HighCVE-2004-1693mambomambo mamboPHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.EPSS2.98%HighCVE-2004-1826mambo · mambo_open_source_4.5mambo mambo_open_source_4.5SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.EPSS1.23%MediumCVE-2004-1825mambo · mambo_open_sourcemambo mambo_open_sourceCross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters.EPSS1.97%MediumCVE-2002-2288mambo · site_servermambo site_serverMambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.EPSS2.01%CriticalCVE-2002-2290mambo · mambo_site_servermambo mambo_site_serverMambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.EPSS1.84%MediumCVE-2002-2247mambo · mambo_site_servermambo mambo_site_serverThe administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.EPSS2.57%MediumCVE-2002-1662mambo · mambo_site_servermambo mambo_site_serverMultiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration.EPSS1.31%HighCVE-2006-1794mambomambo mamboSQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).EPSS5.66%MediumCVE-2006-1956joomla · joomla\! +1 morejoomla joomla\!The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message.EPSS1.53%MediumCVE-2006-0871mambomambo mamboDirectory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter. NOTE: CVE-2006-1794 has been assigned to the SQL injection vector.EPSS1.71%MediumCVE-2006-4270mambo · mambelfish_componentmambo mambelfish_componentPHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.EPSS3.03%MediumCVE-2006-4288mambo · a6mambocredits_componentmambo a6mambocredits_componentPHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. NOTE: some of these details are obtained from third party information.EPSS5.81%HighCVE-2006-4275mambo · catalogshop_componentmambo catalogshop_componentPHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.EPSS1.51%MediumCVE-2006-4553joomla · com_comprofiler_component +1 morejoomla com_comprofiler_componentPHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.EPSS4.99%HighCVE-2006-4286mambomambo mamboPHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version. The original researcher is known to be frequently inaccurateEPSS1.51%