Mambo Cms Security Vulnerabilities and Issues — Mambo Cms CVE List

Lucene search

Mambo-foundationMambo Cms

5 matches found

CVE•added 2020/02/12 8:15 p.m.•52 views

CVE-2011-2499

Mambo CMS through 4.6.5 has multiple XSS.

6.1CVSS6.3AI score0.0024EPSS

CVE•added 2014/06/09 7:55 p.m.•38 views

CVE-2013-2562

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.

2.1CVSS4.9AI score0.00074EPSS

CVE•added 2014/06/09 7:55 p.m.•33 views

CVE-2013-2563

Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.

2.1CVSS5.2AI score0.00056EPSS

CVE•added 2014/06/09 7:55 p.m.•31 views

CVE-2013-2564

Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.

5CVSS5.2AI score0.00543EPSS

CVE•added 2019/02/15 9:29 p.m.•29 views

CVE-2013-2565

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.

5.3CVSS5.3AI score0.00264EPSS