Vulnerabilities

TI-2008-00578 CVE-2008-0606 · GHSA-gr9c-j838-2fqj

SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo…

LOW 35

SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-02-06 No fix listed CWE-89

TI-2006-05817 CVE-2006-6049 · GHSA-h9xj-hvh6-mrr6

PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com_shambo2)…

LOW 37

PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com_shambo2) component for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01959 Published 2006-11-22 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo…

PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com_shambo2)…