44 matches found
CVE-2005-4859
CVE-2005-4859 affects mimicboard2 (Mimic2) 086 and earlier. The flaw is that sensitive information is stored under the web root with insufficient access control, allowing remote attackers to download a database via a direct request for mimic2.dat. The available connected documents confirm the aff...
6.4CVSS6.8AI score0.01349EPSS
SaveExploits1References2Affected Software1
CVE-2006-4859
Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...
7.5CVSS7AI score0.07385EPSS
SaveExploits1References2Affected Software1
20