MS
Product
Mambo Site Server
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Mambo Site Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-4745 | – | Sep 6 | Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com_akobook) for Mambo allow remote attackers to inject arbitrary web script or HTML… Affected: All versions, or not specified |
| CVE-2005-3738 | – | Nov 22 | globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various… Affected: 4.0; 4.0.10; 4.0.11; 4.0.12; 4.0.12_beta; 4.0.12_beta_2; +4 more |
| CVE-2003-1203 | – | Mar 18 | Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter Affected: 4.0.10 |
| CVE-2002-2290 | – | Dec 31 | Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges Affected: 4.0.11 |
| CVE-2002-1662 | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the… Affected: 4.0.11 |
| CVE-2002-2247 | – | Dec 31 | The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which… Affected: 4.0.11 |
| CVE-2001-1011 | – | Jul 25 | index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate… Affected: 3.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5 |
Showing 7