MA
Vendor
Mambo-foundation
15
CVEs
0
On KEV
0
New 30D
Products
MA–
Mambo
Mambo-foundation
9 CVEs0 on KEV0 new
MC6.1
Mambo Cms
Mambo-foundation
5 CVEs0 on KEV0 new
CM–
Com Musica
Mambo-foundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2011-2499 | MC Mambo Cms Mambo-foundation | 6.1 | Feb 12 | Mambo CMS through 4.6.5 has multiple XSS |
| CVE-2013-2565 | MC Mambo Cms Mambo-foundation | 5.3 | Feb 15 | A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver |
| CVE-2013-2564 | MC Mambo Cms Mambo-foundation | – | Jun 9 | Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file |
| CVE-2013-2563 | MC Mambo Cms Mambo-foundation | – | Jun 9 | Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file |
| CVE-2013-2562 | MC Mambo Cms Mambo-foundation | – | Jun 9 | Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors |
| CVE-2011-2917 | MA Mambo Mambo-foundation | – | Dec 8 | SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter |
| CVE-2011-3754 | MA Mambo Mambo-foundation | – | Sep 23 | Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated… |
| CVE-2008-7215 | MA Mambo Mambo-foundation | – | Sep 11 | The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified… |
| CVE-2008-7214 | MA Mambo Mambo-foundation | – | Sep 11 | Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the… |
| CVE-2008-7213 | MA Mambo Mambo-foundation | – | Sep 11 | Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and… |
| CVE-2008-7212 | MA Mambo Mambo-foundation | – | Sep 11 | MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to… |
| CVE-2008-6234 | CM Com Musica Mambo-foundation | – | Feb 21 | SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php |
| CVE-2008-2498 | MA Mambo Mambo-foundation | – | May 28 | Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1)… |
| CVE-2008-2497 | MA Mambo Mambo-foundation | – | May 28 | CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors |
| CVE-2006-1957 | MA Mambo Mambo-foundation | – | Apr 21 | The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple… |