CVE-2011-3754

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a ...

5.0 Medium

CVE-2011-3754 is a medium vulnerability (CVSS 5.0) in Mambo-foundation Mambo, published September 23, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.33%, the 71st percentile. No source names a fixed version.

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/sef.php and certain other files.

Exploit likelihood

1.33%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2011-3754
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-3754
Updated: 2026-11-02

EUVDEUVD-2011-3711 No score

Record: EUVD-2011-3711
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g6p8-pjh6-qj25 No score

Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a ...

Record: GHSA-g6p8-pjh6-qj25
Weakness: CWE-200
Updated: 2026-11-02

Affected products

mambo-foundation mambo

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

History

References