Mambo Mambo vulnerabilities

• mambo cms, mambo-foundation mambo cms +1 more A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php,... CVE-2013-2565 5.3 MediumFebruary 15, 2019
• mambads, mambo +1 more SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for... CVE-2008-5226 Public exploit 7.5 HighNovember 25, 2008
• mambo Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when... CVE-2008-3712 Public exploit 2.6 LowAugust 19, 2008
• mambo PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite... CVE-2008-2905 Public exploit EPSS 18.4% 6.8 MediumJune 30, 2008
• joomla, joomlapixel jooget, mambo +2 more SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component... CVE-2008-0829 Public exploit 7.5 HighFebruary 19, 2008
• joomla, mambo, mgfi xfaq +2 more SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and... CVE-2008-0795 Public exploit 7.5 HighFebruary 15, 2008
• arthur konze webdesign akogallery, joomla, mambo +2 more SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta... CVE-2008-0561 Public exploit 7.5 HighFebruary 4, 2008
• darko selesi estateagent, joomla, mambo +2 more SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1... CVE-2008-0517 Public exploit 7.5 HighJanuary 31, 2008
• mambo, joomla com newsletter +1 more SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4... CVE-2008-0510 Public exploit 7.5 HighJanuary 31, 2008
• mambo open source Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows... CVE-2008-0261 5.0 MediumJanuary 15, 2008
• mambo Multiple cross-site scripting (XSS) vulnerabilities in index.php in Mambo 4.6.2 allow remote... CVE-2007-6455 Public exploit 4.3 MediumDecember 20, 2007
• ag-solutions mosmedia lite, joomla, mambo +2 more Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite ... CVE-2007-5362 Public exploit EPSS 36.5% 6.8 MediumOctober 11, 2007
• mambads, mambo +1 more SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component... CVE-2007-5177 Public exploit 7.5 HighOctober 3, 2007
• joomla akobook, mambo site server +1 more Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component ... CVE-2007-4745 4.3 MediumSeptember 6, 2007
• mambo, parkview consultants simplefaq +1 more SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for... CVE-2007-4456 Public exploit 7.5 HighAugust 21, 2007
• mambo open source Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions... CVE-2007-4203 9.3 HighAugust 8, 2007
• mambo MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote... CVE-2007-2557 4.0 MediumMay 9, 2007
• mambo open source The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights... CVE-2006-7202 7.8 HighMay 9, 2007
• mambo calendar Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5... CVE-2007-2049 Public exploit 6.8 MediumApril 16, 2007
• mambo open source Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary... CVE-2006-7150 7.5 HighMarch 7, 2007
• mambo Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to... CVE-2006-7149 4.3 MediumMarch 7, 2007
• mambo SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary... CVE-2007-0789 6.8 MediumFebruary 6, 2007
• joomla, mambo +1 more SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows... CVE-2007-0374 7.5 HighJanuary 19, 2007
• mambo a6mambocredits component PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits... CVE-2006-4288 Public exploit 6.8 MediumAugust 22, 2006
• mambo ** DISPUTED ** PHP remote file inclusion vulnerability in contentpublisher.php in the... CVE-2006-4286 Disputed 7.5 HighAugust 22, 2006
• mambo gallery manager PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2... CVE-2006-3981 7.5 HighAugust 5, 2006
• mambo gallery manager PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo... CVE-2006-3980 Public exploit 6.8 MediumAugust 5, 2006
• mambo multibanners PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for... CVE-2006-3846 Public exploit 6.8 MediumJuly 25, 2006
• mambo calendar PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and... CVE-2006-3843 Public exploit 7.5 HighJuly 25, 2006
• mambo SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier... CVE-2006-3263 7.5 HighJune 27, 2006
• mambo SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier... CVE-2006-3262 Public exploit 7.5 HighJune 27, 2006
• joomla, mambo +1 more The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain... CVE-2006-1956 5.0 MediumApril 21, 2006
• mambo SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote... CVE-2006-1794 Public exploit 7.6 HighApril 17, 2006
• mambo Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and... CVE-2006-0871 Public exploit 6.4 MediumFebruary 24, 2006
• mambo open source 4.5 Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc... CVE-2005-4156 9.4 HighDecember 11, 2005
• mambo site server globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows... CVE-2005-3738 Public exploit 2.6 LowNovember 22, 2005
• mambo content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation... CVE-2005-3586 5.0 MediumNovember 16, 2005
• mambo SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers... CVE-2005-2002 Public exploit 7.5 HighJune 15, 2005
• mambo PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to... CVE-2005-0512 7.5 HighFebruary 21, 2005
• mambo portal SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09)... CVE-2004-2143 Public exploit 7.5 HighDecember 31, 2004
• mambo open source Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly... CVE-2004-2072 Public exploit 6.8 MediumDecember 31, 2004
• mambo PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote... CVE-2004-1693 Public exploit 7.5 HighSeptember 18, 2004
• mambo open source Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote... CVE-2004-1692 Public exploit 4.3 MediumSeptember 18, 2004
• mambo open source 4.5 SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows... CVE-2004-1826 Public exploit 7.5 HighMarch 16, 2004
• mambo open source Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and... CVE-2004-1825 Public exploit 4.3 MediumMarch 16, 2004
• mambo site server Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote... CVE-2003-1203 Public exploit 4.3 MediumMarch 18, 2003
• mambo site server Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows... CVE-2002-2290 10.0 HighDecember 31, 2002
• mambo site server The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to... CVE-2002-2247 Public exploit 5.0 MediumDecember 31, 2002
• mambo site server Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote... CVE-2002-1662 6.8 MediumDecember 31, 2002
• mambo site server index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo... CVE-2001-1011 10.0 HighJuly 25, 2001