Login Request a demo
MA
Product
Mambo
by Mambo-foundation · last CVE Dec 8, 2011
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mambo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2011-2917
–
1%
Dec 8
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter
Affected: through 4.6.5; 4.6; 4.6; 4.6; 4.6.1; 4.6.2; +4 more
CVE-2011-3754
–
1%
Sep 23
Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated…
Affected: 4.6.5
CVE-2008-7215
–
2%
Sep 11
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified…
Affected: through 4.6.3; 4.6.2
CVE-2008-7214
–
1%
Sep 11
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the…
Affected: through 4.6.3; 4.6.2
CVE-2008-7213
–
2%
Sep 11
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and…
Affected: through 4.6.3; 4.6.2
CVE-2008-7212
–
2%
Sep 11
MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to…
Affected: through 4.6.3; 4.6.2
CVE-2008-2498
–
1%
May 28
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1)…
Affected: through 4.6.4
CVE-2008-2497
–
1%
May 28
CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors
Affected: through 4.6.4
CVE-2006-1957
–
2%
Apr 21
The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple…
Affected: All versions, or not specified
Showing 9