Login Request a demo
MC
Product
Mambo Cms
by Mambo-foundation · last CVE Feb 12, 2020
5
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities5Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mambo Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2011-2499
6.1
1%
Feb 12
Mambo CMS through 4.6.5 has multiple XSS
Affected: through 4.6.5
CVE-2013-2565
5.3
2%
Feb 15
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver
Affected: 4.6.5
CVE-2013-2564
–
2%
Jun 9
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file
Affected: 4.6.5
CVE-2013-2563
–
0%
Jun 9
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file
Affected: 4.6.5
CVE-2013-2562
–
0%
Jun 9
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors
Affected: 4.6.5
Showing 5