CVE-2006-0871

Mambo < 4.5.3h - Multiple Vulnerabilities

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter. NOTE: CVE-2006-1794 has been assigned to the SQL injection vector.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-02-24 CVE Reserved
2006-02-24 CVE Published
2016-02-24 First Exploit
2024-06-15 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (8)

URL	Tag	Source
http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html	Mailing List
http://securityreason.com/securityalert/493	Third Party Advisory
http://www.gulftech.org/?node=research&article_id=00104-02242006	X_refsource_misc
http://www.osvdb.org/23505	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/43835	2016-02-24

URL	Date	SRC
http://secunia.com/advisories/18935	2011-03-07
http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released	2011-03-07

URL	Date	SRC
http://www.vupen.com/english/advisories/2006/0719	2011-03-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Mambo Search vendor "Mambo"		Mambo Search vendor "Mambo" for product "Mambo"				4.5.3h Search vendor "Mambo" for product "Mambo" and version "4.5.3h"		-		Affected
Mambo Search vendor "Mambo"		Mambo Search vendor "Mambo" for product "Mambo"				4.5.3h Search vendor "Mambo" for product "Mambo" and version "4.5.3h"		h		Affected