MO
Product
Mambo Open Source
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Mambo Open Source to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-0261 | – | Jan 15 | Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service (query flood) via unspecified vectors Affected: All versions, or not specified |
| CVE-2007-4203 | – | Aug 8 | Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter Affected: 4.6.2 |
| CVE-2006-7202 | – | May 9 | The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via… Affected: 4.6.1 |
| CVE-2006-7150 | – | Mar 7 | Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2)… Affected: 4.6; 4.6; 4.6; 4.6.1 |
| CVE-2004-2072 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the… Affected: 4.6 |
| CVE-2004-1692 | – | Sep 18 | Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3)… Affected: 4.5_1.0.9 |
| CVE-2004-1825 | – | Mar 16 | Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1)… Affected: 4.5_1.0.0; 4.5_1.0.1 |
Showing 7