CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2008-2498
https://notcve.org/view.php?id=CVE-2008-2498
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) articleid and (2) mcname parameters. NOTE: some of these details are obtained from third party information. Múltiples vulnerabilidades de inyección SQL en index.php en Mambo anterior a 4.6.4, cuando magic_quotes_gpc están deshabilitadas, permite a atacantes remotos ejecutar comandos SQL de su elección a través de los parámetros (1) articleid y (2)mcname. NOTA: algunos de estos detalles has sido obtenidos a partir de información de terceros. • http://forum.mambo-foundation.org/showthread.php?t=11799 http://secunia.com/advisories/30343 http://www.securityfocus.com/bid/29373 http://www.vupen.com/english/advisories/2008/1660/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42644 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2008-2497
https://notcve.org/view.php?id=CVE-2008-2497
CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Vulnerabilidad de inyección CRLF en Mambo anterior a 4.6.4, permite a atacantes inyectar arbitrariamente cabeceras HTTP y llevar a cabo respuestas HTTP dividiendo ataques a través de vectores no especificados. • http://forum.mambo-foundation.org/showthread.php?t=11799 http://secunia.com/advisories/30343 http://www.securityfocus.com/bid/29373 http://www.vupen.com/english/advisories/2008/1660/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42645 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 2CVE-2008-1849 – Joomla! Component JoomlaXplorer 1.6.2 - Remote s
https://notcve.org/view.php?id=CVE-2008-1849
Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action. Vulnerabilidad de salto de directorio en index.php del componente joomlaXplorer 1.6.2 y anteriores (com_joomlaxplorer) para Mambo/Joomla!, permite a atacantes remotos listar directorios de su elección a través del parámetro "dir" .. • https://www.exploit-db.com/exploits/5431 http://www.securityfocus.com/bid/28746 https://exchange.xforce.ibmcloud.com/vulnerabilities/41778 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.3EPSS: 0%CPEs: 3EXPL: 2CVE-2008-1465 – Joomla! Component Restaurante 1.0 - 'id' SQL Injection
https://notcve.org/view.php?id=CVE-2008-1465
SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562. Vulnerabilidad de inyección SQL en el componente Detodas Restaurante (com_restaurante) 1.0 para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail (detalle) a index.php, un producto distinto a CVE-2008-0562. • https://www.exploit-db.com/exploits/5280 http://secunia.com/advisories/29471 http://www.securityfocus.com/bid/28324 https://exchange.xforce.ibmcloud.com/vulnerabilities/41283 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 2CVE-2008-1459 – Joomla! Component Alberghi 2.1.3 - 'id' SQL Injection
https://notcve.org/view.php?id=CVE-2008-1459
SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. Vulnerabilidad de inyección SQL en el componente Alberghi (com_alberghi) 2.1.3 y anteriores para Mambo y Joomla! permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id en una acción detail (detalle) a index.php. • https://www.exploit-db.com/exploits/5278 http://secunia.com/advisories/29473 http://www.securityfocus.com/bid/28331 https://exchange.xforce.ibmcloud.com/vulnerabilities/41285 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •