Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mambo mambo vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2006-3843
PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the absolute_path parameter.
Mambo Mambo Calendar 1.5.7
1 EDB exploit
6.8
CVSSv2
CVE-2006-3846
PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote malicious users to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Mambo Mambo Multibanners 1.0.1
1 EDB exploit
5
CVSSv2
CVE-2002-2247
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote malicious users to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
Mambo Mambo Site Server 4.0.11
1 EDB exploit
7.5
CVSSv2
CVE-2008-5226
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote malicious users to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5177.
Mambads Mambads 1.0
Mambo Mambo
1 EDB exploit
2.1
CVSSv2
CVE-2013-2563
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.
Mambo-foundation Mambo Cms 4.6.5
6.8
CVSSv2
CVE-2004-2072
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote malicious users to execute script on other clients via the Itemid parameter.
Mambo Mambo Open Source 4.6
1 EDB exploit
10
CVSSv2
CVE-2002-2290
Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote malicious users to gain privileges.
Mambo Mambo Site Server 4.0.11
9.3
CVSSv2
CVE-2007-4203
Session fixation vulnerability in Mambo 4.6.2 CMS allows remote malicious users to hijack web sessions by setting the Cookie parameter.
Mambo Mambo Open Source 4.6.2
5
CVSSv2
CVE-2013-2564
Mambo CMS 4.6.5 allows remote malicious users to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.
Mambo-foundation Mambo Cms 4.6.5
4.3
CVSSv2
CVE-2003-1203
Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote malicious users to execute script on other clients via the ?option parameter.
Mambo Mambo Site Server 4.0.10
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »