Unscored severity · published Jun 27, 2006
CVE-2006-3262
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter
–
CVSS
2.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mambo · Mambo
through 4.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3262
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3262
Exploit
http://retrogod.altervista.org/mambo_46rc1_sql.html
Patch
http://secunia.com/advisories/20745
securityreason.com
http://securityreason.com/securityalert/1158
securitytracker.com
http://securitytracker.com/id?1016334
www.mamboserver.com
http://www.mamboserver.com/?option=com_content&task=view&id=207
www.osvdb.org
http://www.osvdb.org/26624
More from Mambo
–
CVE-2008-5226
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat…
–
CVE-2008-3712
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via…
–
CVE-2008-2905
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote…
–
CVE-2008-0829
SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands…
–
CVE-2008-0795
SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid…