Vendors / Mambo-foundation Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Mambo-foundation records in CISA KEV No Mambo-foundation vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 28
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02455 · Published 2014-06-09 · No fix listed CWE-399
Priority LOW 28
Mambo CMS through 4.6.5 has multiple XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00649 · Published 2020-02-12 · No fix listed CWE-79
Priority LOW 27
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01602 · Published 2019-02-15 · No fix listed CWE-22
Priority LOW 12
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.00465 · Published 2014-06-09 · No fix listed CWE-264
Priority LOW 12
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.00475 · Published 2014-06-09 · No fix listed CWE-255
Open these records in search → All records by CVSS severity
0 3 10 2 0
THREATIST.IORead the docs