Unscored severity · published Mar 16, 2004
CVE-2004-1826
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MO
Mambo Open Source 4.5 · Mambo
1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.3beta · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1826
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1826
marc.info
http://marc.info/?l=bugtraq&m=107945576020593&w=2
Patch
http://secunia.com/advisories/11140
Exploit
http://www.osvdb.org/4307
Exploit
http://www.securityfocus.com/bid/9891
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15500
More from Mambo Open Source 4.5
–
CVE-2005-4156
Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of…