CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2008-0261
https://notcve.org/view.php?id=CVE-2008-0261
15 Jan 2008 — Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause a denial of service (query flood) via unspecified vectors. Vulnerabilidad no especificada en el componente y módulo search en Mambo 4.5.x y 4.6.x permite a atacantes remotos provocar denegación de servicio (inundación de consultas) a través de vectores no especificados. • http://forum.mambo-foundation.org/showthread.php?t=9651 • CWE-399: Resource Management Errors •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2007-4203
https://notcve.org/view.php?id=CVE-2007-4203
08 Aug 2007 — Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter. Vulnerabilidad de fijación de sesión en Mambo 4.6.2 CMS permite a atacantes remotos secuestrar sesiones web estableciendo el parámetro Cookie. • http://osvdb.org/42514 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2006-7202
https://notcve.org/view.php?id=CVE-2006-7202
09 May 2007 — The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors. La función dofreePDF en includes/pdf.php de Mambo 4.6.1 no comprueba adecuadamente los derechos de acceso a contenido de base de datos, lo cual permite a atacantes remotos leer cierto contenido mediante vectores no especificados. • http://secunia.com/advisories/25039 •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 1CVE-2006-7150
https://notcve.org/view.php?id=CVE-2006-7150
07 Mar 2007 — Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php. Múltiples vulnerabilidades de inyección SQL en el Mambo 4.6.x permiten a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro mcname en el (1) moscomment.php y (2) com_comment.php. • http://securityreason.com/securityalert/2379 •
CVSS: 9.4EPSS: 0%CPEs: 6EXPL: 0CVE-2005-4156
https://notcve.org/view.php?id=CVE-2005-4156
11 Dec 2005 — Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character. • http://securitytracker.com/alerts/2005/Nov/1015176.html •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 3CVE-2004-2072 – Mambo Open Source 4.6 - 'Itemid' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-2072
31 Dec 2004 — Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter. • https://www.exploit-db.com/exploits/23657 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 3CVE-2004-1692 – Mambo Open Source 4.5.1 (1.0.9) - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-1692
18 Sep 2004 — Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters. • https://www.exploit-db.com/exploits/24614 •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 3CVE-2004-1826 – Mambo Open Source 4.5 - 'index.php' SQL Injection
https://notcve.org/view.php?id=CVE-2004-1826
16 Mar 2004 — SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. • https://www.exploit-db.com/exploits/23834 •
CVSS: 6.1EPSS: 1%CPEs: 2EXPL: 3CVE-2004-1825 – Mambo Open Source 4.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-1825
16 Mar 2004 — Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters. • https://www.exploit-db.com/exploits/23824 •