Mambo < 4.5.3h - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities Vendor: Miro International Pty Ltd Product: Mambo Version: = 4.5.3h Website: http://www.mamboserver.com BID: 16775 CVE: CVE-2006-0871 CVE-2006-1794 OSVDB: 23402 23503 23505 SECUNIA: 18935 PACKETSTORM: 44191 Description: Mambo is a popular Open Source Content...

CVE-2006-0871

CVE-2006-0871 (Mambo 4.5.3/4.5.3h and earlier): directory traversal in _setTemplate via mos_change_template parameter could allow remote reading of arbitrary files. Related entries note an updated Mambo release; exploits reference local file inclusion/remote impact in multiple components. CVE-200...