Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mambo mambo vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-3712
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote malicious users to inject arbitrary web script or HTML via the (1) query string to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/co...
Mambo Mambo 4.6.2
Mambo Mambo 4.6.5
2 EDB exploits
NA
CVE-2006-7149
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote malicious users to inject arbitrary web script or HTML via (1) the query string to (a) index.php, which reflects the string in an error message from mod_login.php; and the (2) mcname parameter to (b) ...
Mambo Mambo 4.6
Mambo Mambo 4.6.1
NA
CVE-2004-1826
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Mambo Mambo Open Source 4.5 1.0.0
Mambo Mambo Open Source 4.5 1.0.3
Mambo Mambo Open Source 4.5 1.0.3beta
Mambo Mambo Open Source 4.5 1.0.1
Mambo Mambo Open Source 4.5 1.0.2
1 EDB exploit
NA
CVE-2008-7212
MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in a...
Mambo-foundation Mambo
Mambo-foundation Mambo 4.6.2
Brilaps Mostlyce
NA
CVE-2008-7213
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to inject arbitrary web script or HTML via the Com...
Mambo-foundation Mambo
Mambo-foundation Mambo 4.6.2
Brilaps Mostlyce
1 EDB exploit
NA
CVE-2008-7215
The Image Manager in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileU...
Mambo-foundation Mambo
Mambo-foundation Mambo 4.6.2
Brilaps Mostlyce
NA
CVE-2008-7214
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE prior to 2.4, as used in Mambo 4.6.3 and previous versions, allows remote malicious users to hijack the authentication of administrators for requests that add new administrator accounts via th...
Mambo-foundation Mambo
Mambo-foundation Mambo 4.6.2
Brilaps Mostlyce
NA
CVE-2004-1825
Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters.
Mambo Mambo Open Source 4.5 1.0.0
Mambo Mambo Open Source 4.5 1.0.1
1 EDB exploit
NA
CVE-2006-7150
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote malicious users to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.
Mambo Mambo Open Source 4.6
Mambo Mambo Open Source 4.6.1
NA
CVE-2005-0512
PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote malicious users to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-20...
Mambo Mambo
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644
unprivileged
CVE-2024-3494
CVE-2024-22460
CVE-2024-26026
CVE-2024-23473
firewall
CVE-2024-28889
XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »