Lucene search

K
freebsdFreeBSDF70D09CB-0C46-11DB-AAC7-000C6EC775D9
HistoryJun 19, 2006 - 12:00 a.m.

mambo -- SQL injection vulnerabilities

2006-06-1900:00:00
vuxml.freebsd.org
15

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.031 Low

EPSS

Percentile

91.0%

The Team Mambo reports that two SQL injection
vulnerabilities have been found in Mambo. The
vulnerabilities exists due to missing sanitation of the
title and catid parameters in the
weblinks.php page and can lead to execution of
arbitrary SQL code.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmambo< 4.5.4UNKNOWN

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.031 Low

EPSS

Percentile

91.0%

Related for F70D09CB-0C46-11DB-AAC7-000C6EC775D9