Vulnerability index

Browse CVEs

48 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sitemap MEDIUM 6.8
CVE-2006-3749

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS, when register_globals is ena…

No fix yet
Fix from $1,600 2006-07-21
Mambo HIGH 7.5
CVE-2006-3262

SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL comman…

Fix: after 4.6
Fix from $1,950 2006-06-27
Mambo HIGH 7.5
CVE-2006-3263

SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL comman…

Fix: after 4.6
Fix from $1,950 2006-06-27
Mambo HIGH 7.6
CVE-2006-1794EPSS 6%

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) t…

Fix: after 4.5.3h
Fix from $1,950 2006-04-17
Mambo MEDIUM 6.4
CVE-2006-0871

Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read …

Patch available
Fix from $1,600 2006-02-24
Mambo Open Source 4.5 HIGH 9.4
CVE-2005-4156

Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files a…

Mitigation only
Fix from $1,950 2005-12-11
Mambo MEDIUM 5.0
CVE-2005-3586

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the appli…

No fix yet
Fix from $1,600 2005-11-16
Mambo HIGH 7.5
CVE-2005-2002

SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating…

Patch available
Fix from $1,950 2005-06-15
Mambo HIGH 7.5
CVE-2005-0512

PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_ab…

Fix: after 4.5.2
Fix from $1,950 2005-02-21
Mambo Portal HIGH 7.5
CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitr…

Fix: after 4.5.1_1.0.9
Fix from $1,950 2004-12-31
Mambo Open Source MEDIUM 6.8
CVE-2004-2072

Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute sc…

No fix yet
Fix from $1,600 2004-12-31
Mambo HIGH 7.5
CVE-2004-1693

PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the m…

Patch available
Fix from $1,950 2004-09-18
Mambo Open Source 4.5 HIGH 7.5
CVE-2004-1826

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands …

Patch available
Fix from $1,950 2004-03-16
Mambo Site Server HIGH 10.0
CVE-2002-2290

Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.

Mitigation only
Fix from $1,950 2002-12-31
Mambo Site Server MEDIUM 6.8
CVE-2002-1662

Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients v…

Patch available
Fix from $1,600 2002-12-31
Mambo Site Server MEDIUM 5.0
CVE-2002-2247

The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root pa…

Patch available
Fix from $1,600 2002-12-31
Site Server MEDIUM 5.0
CVE-2002-2288

Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that doe…

Patch available
Fix from $1,600 2002-12-31
Mambo Site Server HIGH 10.0
CVE-2001-1011

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter…

Patch available
Fix from $1,950 2001-07-25