Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mambo-foundation mambo 4.6.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2917
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the zorder parameter.
Mambo-foundation Mambo 4.6.4Mambo-foundation Mambo 4.6.2Mambo-foundation Mambo 4.6.1Mambo-foundation Mambo 4.6Mambo-foundation MamboMambo-foundation Mambo 4.6.3
NA
CVE-2008-7212
MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in a...
Mambo-foundation MamboMambo-foundation Mambo 4.6.2Brilaps Mostlyce
NA
CVE-2008-7213
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to inject arbitrary web script or HTML via the Com...
Mambo-foundation MamboMambo-foundation Mambo 4.6.2Brilaps Mostlyce
NA
CVE-2008-7215
The Image Manager in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileU...
Mambo-foundation MamboMambo-foundation Mambo 4.6.2Brilaps Mostlyce
NA
CVE-2008-7214
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to hijack the authentication of administrators for requests that add new administrator accounts via th...
Mambo-foundation MamboMambo-foundation Mambo 4.6.2Brilaps Mostlyce
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook