WordPress plugin Mambo Importer 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress Mambo Importer plugin <= 1.0 - Authenticated (Administrator+) PHP Object Injection vulnerability

Authenticated Administrator+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Mambo Importer versions = 1.0...

CVE-2011-2499

Mambo CMS through 4.6.5 has multiple XSS...

Cross site scripting

Mambo CMS through 4.6.5 has multiple XSS...

CVE-2011-2499

Mambo CMS through 4.6.5 has multiple XSS...

CVE-2011-2499

CVE-2011-2499 affects Mambo CMS through version 4.6.5, with multiple cross-site scripting (XSS) vulnerabilities reported in the linked records. The connected documents confirm the vendor/product and vulnerability class but do not provide exploit details, affected configurations beyond the version...

Mambo CMS <= 4.6.5 Multiple Vulnerabilities

Mambo CMS is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation...

CVE-2013-2565

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

Design/Logic Flaw

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

CVE-2013-2565

CVE-2013-2565 concerns Mambo CMS v4.6.5. Connected documents confirm the vulnerability resides in scripts thumbs.php, editorFrame.php, editor.php, images.php, and manager.php, which disclose the webserver’s root path. The available sources do not provide exploitation details, affected versions be...

CVE-2013-2565

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

Mambo < 4.5.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Mambo SQL Injection Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.4 Website: http://www.mamboserver.com/ BID: 20366 OSVDB: 50002 Description: Mambo is a popular Open Source Content Management System released under the GNU...

Mambo 4.5.4 - SQL Injection

Mambo 4.5.4 - SQL Injection Mambo SQL Injection Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.4 Website: http://www.mamboserver.com/ BID: 20366 OSVDB: 50002 Description: Mambo is a popular Open Source Content Management System released under the GNU General Public license GNU...

Mambo < 4.5.4 - SQL Injection

Mambo SQL Injection Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.4 Website: http://www.mamboserver.com/ BID: 20366 OSVDB: 50002 Description: Mambo is a popular Open Source Content Management System released under the GNU General Public license GNU GPL. There are unfortunately...

VulnCheck KEV: CVE-2008-2990

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms comfacileforms component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ffcompath parameter...

Mambo < 4.5.3h - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.3h Website: http://www.mamboserver.com BID: 16775 CVE: CVE-2006-0871 CVE-2006-1794 OSVDB: 23402 23503 23505 SECUNIA: 18935 PACKETSTORM: 44191 Description: Mambo is a popular Open Source Content...

Mambo 4.5.3h - Multiple Vulnerabilities

Mambo 4.5.3h - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.3h Website: http://www.mamboserver.com BID: 16775 CVE: CVE-2006-0871 CVE-2006-1794 OSVDB: 23402 23503 23505 SECUNIA: 18935 PACKETSTORM: 44191 Description: Mambo ...

Mambo Login SQL Injection Vulnerability

Mambo is an open source web content management system CMS based on PHP and MySql. The system supports search engine optimization, template/theme downloads and traffic statistics. A SQL injection vulnerability exists in Mambo, which stems from the program failing to adequately filter user-submitte...

Mambo 4.6.5 Cross Site Request Forgery / SQL Injection

Affected software: Mambo Type of vulnerability: csrf to sql injection URL: http://source.mambo-foundation.org/ Discovered by: Provensec Website: http://www.provensec.com version 4.6.5 Proof of concept no csrf token were used on sql query form so attacker can leverage csrf to execute sql query on...

Joomla Component com_artlinks Remote File Inclusion (CVE-2006-3949)

A file inclusion vulnerability has been reported in Mambo ComArtlinks Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...