Skip to content
Mambo-foundation vulnerabilities
Newest
-
mambo cms, mambo-foundation mambo cms +1 more
Mambo CMS through 4.6.5 has multiple XSS.
CVE-2011-2499
6.1 Medium
-
mambo cms, mambo-foundation mambo cms +1 more
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php,...
CVE-2013-2565
5.3 Medium
-
mambo-foundation mambo cms
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth...
CVE-2013-2564
5.0 Medium
-
mambo-foundation mambo cms
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to...
CVE-2013-2563
2.1 Low
-
mambo-foundation mambo cms
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which...
CVE-2013-2562
2.1 Low
-
mambo-foundation mambo
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows...
CVE-2011-2917
Public exploit
7.5 High
-
mambo-foundation mambo
Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a ...
CVE-2011-3754
5.0 Medium
-
brilaps mostlyce, mambo-foundation mambo +1 more
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote...
CVE-2008-7215
5.8 Medium
-
brilaps mostlyce, mambo-foundation mambo +1 more
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2...
CVE-2008-7214
6.8 Medium
-
brilaps mostlyce, mambo-foundation mambo +1 more
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce...
CVE-2008-7213
Public exploit
4.3 Medium
-
brilaps mostlyce, mambo-foundation mambo +1 more
MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain...
CVE-2008-7212
5.0 Medium
-
joomla com musica
SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers...
CVE-2008-6234
Public exploit
7.5 High
-
mambo-foundation mambo
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc...
CVE-2008-2498
7.5 High
-
mambo-foundation mambo
CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary...
CVE-2008-2497
5.0 Medium
-
mambo-foundation mambo, joomla joomla\! +1 more
The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a...
CVE-2006-1957
5.0 Medium