TI-2011-02191 CVE-2011-2499 · GHSA-w7c7-wffw-m9r8
Mambo CMS through 4.6.5 has multiple XSS.
Priority LOW 28
Mambo CMS through 4.6.5 has multiple XSS.
Vulnerabilities
5 records
TI-2013-02270 CVE-2013-2565 · GHSA-8rxr-vp8f-w2vq
Path traversal in Mambo CMS
Priority LOW 27
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.
TI-2013-02269 CVE-2013-2564 · GHSA-frwf-mq3g-f9fj
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and…
Priority LOW 28
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.
TI-2013-02268 CVE-2013-2563 · GHSA-wh5x-5wpw-r4c3
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local…
Priority LOW 12
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.
TI-2013-02267 CVE-2013-2562 · GHSA-chqj-hwq4-xccf
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root…
Priority LOW 12
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.