mambo-foundation mambo vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the zorder parameter.

Mambo-foundation Mambo 4.6.4 Mambo-foundation Mambo 4.6.2 Mambo-foundation Mambo 4.6.1 Mambo-foundation Mambo 4.6 Mambo-foundation Mambo Mambo-foundation Mambo 4.6.3

1 EDB exploit

NA

MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in a...

Mambo-foundation Mambo Mambo-foundation Mambo 4.6.2 Brilaps Mostlyce

NA

Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to inject arbitrary web script or HTML via the Com...

Mambo-foundation Mambo Mambo-foundation Mambo 4.6.2 Brilaps Mostlyce

1 EDB exploit

NA

Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to hijack the authentication of administrators for requests that add new administrator accounts via th...

Mambo-foundation Mambo Mambo-foundation Mambo 4.6.2 Brilaps Mostlyce

NA

The Image Manager in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileU...

Mambo-foundation Mambo Mambo-foundation Mambo 4.6.2 Brilaps Mostlyce

NA

CRLF injection vulnerability in Mambo prior to 4.6.4 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Mambo-foundation Mambo

NA

Multiple SQL injection vulnerabilities in index.php in Mambo prior to 4.6.4, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary SQL commands via the (1) articleid and (2) mcname parameters. NOTE: some of these details are obtained from third part...

Mambo-foundation Mambo

6.1

CVSSv3

Mambo CMS up to and including 4.6.5 has multiple XSS.

Mambo-foundation Mambo Cms

NA

Mambo 4.6.5 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files.

Mambo-foundation Mambo 4.6.5

NA

Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.

Mambo-foundation Mambo Cms 4.6.5

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook