Skip to contentMambo vulnerabilities
Newest
- mamboMOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote...CVE-2007-25574.0 Medium
- mambo open sourceThe dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights...CVE-2006-72027.8 High
- joomla jambook** DISPUTED ** PHP remote file inclusion vulnerability in jambook.php in the Jambook ...CVE-2007-2196Disputed6.8 Medium
- mambo calendarMultiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5...CVE-2007-2049Public exploit6.8 Medium
- joomla taskhopper componentMultiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and...CVE-2007-2005Public exploit6.8 Medium
- mambo flatmenuPHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier...CVE-2007-1702Public exploit6.8 Medium
- joomla swmenu componentMultiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and...CVE-2007-1699Public exploitEPSS 10.8%10.0 High
- joomla nfn address bookMultiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook)...CVE-2007-1596Public exploit9.3 High
- mambo open sourceMultiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary...CVE-2006-71507.5 High
- mamboMultiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to...CVE-2006-71494.3 Medium
- mambo mostlycePHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor...CVE-2006-7104Public exploit7.5 High
- mamboSQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary...CVE-2007-07896.8 Medium
- joomla, mambo +1 moreSQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows...CVE-2007-03747.5 High
- mambo extcalthai moduleMultiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and...CVE-2006-6634Public exploit7.5 High
- joomla prince clan chess componentUnspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and...CVE-2006-5044Public exploit7.5 High
- joomla jim component** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the JIM component for...CVE-2006-4556Disputed7.5 High
- joomla com comprofiler componentPHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0...CVE-2006-4553Public exploit6.8 Medium
- mambo contacts xtd component** DISPUTED ** PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD ...CVE-2006-4375Disputed7.5 High
- mambo bigape-backup componentPHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component ...CVE-2006-4296Public exploit7.5 High
- mambo a6mambocredits componentPHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits...CVE-2006-4288Public exploit6.8 Medium
- mambo** DISPUTED ** PHP remote file inclusion vulnerability in contentpublisher.php in the...CVE-2006-4286Disputed7.5 High
- mambo anjel component** DISPUTED ** PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly...CVE-2006-4280Disputed7.5 High
- mambo catalogshop componentPHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo...CVE-2006-42757.5 High
- mambo mambelfish componentPHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component ...CVE-2006-4270Public exploit6.8 Medium
- joomla x-shop component** DISPUTED ** PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop...CVE-2006-4269Disputed7.5 High
- mambo mtg myhomepage component** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the lmtg_myhomepage...CVE-2006-4264Disputed7.5 High
- joomla moslistmessenger componentPHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm)...CVE-2006-42297.5 High
- mambo gallery managerPHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2...CVE-2006-39817.5 High
- mambo gallery managerPHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo...CVE-2006-3980Public exploit6.8 Medium
- mambo bayesiannaivefilterPHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang...CVE-2006-3962Public exploit7.5 High
- mambo artlinks componentPHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component ...CVE-2006-3949Public exploit6.8 Medium
- mambo mambatstaffPHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the...CVE-2006-3947Public exploit6.8 Medium
- mambo multibannersPHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for...CVE-2006-3846Public exploit6.8 Medium
- mambo calendarPHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and...CVE-2006-3843Public exploit7.5 High
- mambo smf-forumPHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component ...CVE-2006-3773Public exploit6.8 Medium
- mambo sitemapPHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0...CVE-2006-3749Public exploit6.8 Medium
- mambo videodbPHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component...CVE-2006-3736Public exploit7.5 High
- mamboSQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier...CVE-2006-32637.5 High
- mamboSQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier...CVE-2006-3262Public exploit7.5 High
- joomla, mambo +1 moreThe com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain...CVE-2006-19565.0 Medium
- mamboSQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote...CVE-2006-1794Public exploit7.6 High
- mamboDirectory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and...CVE-2006-0871Public exploit6.4 Medium
- mambo open source 4.5Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc...CVE-2005-41569.4 High
- mambo site serverglobals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows...CVE-2005-3738Public exploit2.6 Low
- mambocontent.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation...CVE-2005-35865.0 Medium
- mamboSQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers...CVE-2005-2002Public exploit7.5 High
- mamboPHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to...CVE-2005-05127.5 High
- mambo portalSQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09)...CVE-2004-2143Public exploit7.5 High
- mambo open sourceCross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly...CVE-2004-2072Public exploit6.8 Medium
- mamboPHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote...CVE-2004-1693Public exploit7.5 High
- Show moreLoading…