MA
Product
Mambo
26
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Mambo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-5226 | – | Nov 25 | SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat… Affected: All versions, or not specified |
| CVE-2008-3712 | – | Aug 19 | Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via… Affected: 4.6.2; 4.6.5 |
| CVE-2008-2905 | – | Jun 30 | PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote… Affected: 4.0.14; 4.5; 4.5.0.2; 4.5.1.3; 4.5.1_1.0.9; 4.5.1_beta; +17 more |
| CVE-2008-0829 | – | Feb 19 | SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands… Affected: All versions, or not specified |
| CVE-2008-0795 | – | Feb 15 | SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid… Affected: 4.5 |
| CVE-2008-0561 | – | Feb 4 | SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL… Affected: All versions, or not specified |
| CVE-2008-0517 | – | Jan 31 | SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary… Affected: 4.5; 4.5.0.2; 4.5.1.3; 4.5.1_1.0.9; 4.5.1_beta; 4.5.1_beta2; +12 more |
| CVE-2008-0510 | – | Jan 31 | SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the… Affected: 4.5 |
| CVE-2007-6455 | – | Dec 20 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Itemid parameter in a… Affected: 4.6.2 |
| CVE-2007-5362 | – | Oct 11 | Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla! allow remote attackers to… Affected: All versions, or not specified |
| CVE-2007-5177 | – | Oct 3 | SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid… Affected: All versions, or not specified |
| CVE-2007-4456 | – | Aug 21 | SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter Affected: All versions, or not specified |
| CVE-2007-2557 | – | May 9 | MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors Affected: 4.6.1 |
| CVE-2006-7149 | – | Mar 7 | Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the query string to (a) index.php, which… Affected: 4.6; 4.6; 4.6.1 |
| CVE-2007-0789 | – | Feb 6 | SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to… Affected: through 4.5.4 |
| CVE-2007-0374 | – | Jan 19 | SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows remote attackers to execute arbitrary SQL commands via the id parameter when cancelling… Affected: 4.6.1 |
| CVE-2006-4286 | – | Aug 22 | PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP… Affected: 4.0.14; 4.5.0.2; 4.5.1.3; 4.5.1_1.0.9; 4.5.1a; 4.5.1a; +15 more |
| CVE-2006-3263 | – | Jun 27 | SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter Affected: through 4.6 |
| CVE-2006-3262 | – | Jun 27 | SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter Affected: through 4.6 |
| CVE-2006-1956 | – | Apr 21 | The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error… Affected: 4.5.3h |
| CVE-2006-1794 | – | Apr 17 | SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the… Affected: through 4.5.3h; 4.0.14; 4.5.1_1.0.9; 4.5.1a; 4.5.1a; 4.5.1a; +10 more |
| CVE-2006-0871 | – | Feb 24 | Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files… Affected: 4.5.3h; 4.5.3h |
| CVE-2005-3586 | – | Nov 16 | content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error Affected: 4.5.2; 4.5.2.1; 4.5.2.2; 4.5.2.3 |
| CVE-2005-2002 | – | Jun 15 | SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter Affected: 4.5.0.2; 4.5.1.3; 4.5.1a; 4.5.2; 4.5.2.2; 4.5_1.0.9 |
| CVE-2005-0512 | – | Feb 21 | PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to… Affected: through 4.5.2 |
| CVE-2004-1693 | – | Sep 18 | PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path… Affected: 4.5_1.0.9 |
Showing 26