Mamboxchange

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Mamboxchange records in CISA KEV

No Mamboxchange vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Laithai 4 records MEDIUM A6mambohelpdesk 1 record MEDIUM Com Zoom 1 record MEDIUM Extended Registration 1 record LOW Loudmouth 1 record LOW Mambo Email Publisher 1 record LOW Mambowiki 1 record LOW Mosreporter 1 record LOW

Records

4 records in Laithai · all components

TI-2008-00472 CVE-2008-0500 · GHSA-4r67-552x-9f24

Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and…

MEDIUM 46

Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack vectors related to (1) mod_login and (2) mod_template_chooser.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01541 Published 2008-01-30 No fix listed

TI-2008-00471 CVE-2008-0499 · GHSA-wmwx-j79h-c89r

SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01096 Published 2008-01-30 No fix listed CWE-89

TI-2006-06833 CVE-2006-7092 · GHSA-9pfq-prhj-q3h7

SQL injection vulnerability in includes/mambo.php in Mambo LaiThai 4.5.4 SP2 and earlier…

LOW 35

SQL injection vulnerability in includes/mambo.php in Mambo LaiThai 4.5.4 SP2 and earlier allows remote attackers to execute arbitrary SQL commands via the usercookie[password] cookie parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01117 Published 2007-02-28 No fix listed

TI-2006-06834 CVE-2006-7093 · GHSA-wmgp-48v4-fxcm

Cross-site scripting (XSS) vulnerability in Mambo LaiThai 4.5.4 Security Patch 2 and…

LOW 28

Cross-site scripting (XSS) vulnerability in Mambo LaiThai 4.5.4 Security Patch 2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01086 Published 2007-02-28 No fix listed

Open these records in search →

Critical	1
High	9
Medium	5
Low	0
No CVSS	0