Skip to content
Noroxi

mambo-foundation records

26 published records for vendor mambo-foundation.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
13
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 19
  2. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2008-1465
    37Monitor

    SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to exec

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    detodas · com restauranteMar 24, 2008

  • CVE-2011-2917
    30Monitor

    SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL comm

    HighCVSS 7.5Proof of conceptEPSS 1%

    mambo-foundation · mamboDec 8, 2011

  • CVE-2009-0380
    30Monitor

    SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote

    HighCVSS 7.5Proof of conceptEPSS 1%

    joomla · joomlaFeb 2, 2009

  • CVE-2006-7247
    30Monitor

    SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to exec

    HighCVSS 7.5Proof of conceptEPSS 1%

    joomla · com weblinksSep 6, 2012

  • CVE-2008-2498
    30Monitor

    Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to exec

    HighCVSS 7.5No exploitEPSS 1%

    mambo-foundation · mamboMay 28, 2008

  • CVE-2008-0801
    30Monitor

    SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 0%

    paxxgallery · com paxxgalleryFeb 15, 2008

  • CVE-2008-4617
    30Monitor

    SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id par

    HighCVSS 7.5Proof of conceptEPSS 0%

    joomla · joomlaOct 20, 2008

  • CVE-2008-6234
    30Monitor

    SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the

    HighCVSS 7.5Proof of conceptEPSS 0%

    joomla · com musicaFeb 20, 2009

  • CVE-2008-6481
    30Monitor

    SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbit

    HighCVSS 7.5Proof of conceptEPSS 0%

    joomla · joomlaMar 17, 2009

  • CVE-2009-4474
    30Monitor

    SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to execute arbitrary SQL com

    HighCVSS 7.5Proof of conceptEPSS 0%

    mikedeboer · com zoomDec 30, 2009

  • CVE-2010-4944
    30Monitor

    SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbi

    HighCVSS 7.5Proof of conceptEPSS 0%

    joomla · com elite expertsOct 9, 2011

  • CVE-2009-4199
    27Monitor

    Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Joomla!, when magic_qu

    MediumCVSS 6.8Proof of conceptEPSS 0%

    joomla · joomla\!Dec 4, 2009

  • CVE-2008-7214
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allo

    MediumCVSS 6.8No exploitEPSS 0%

    mambo-foundation · mamboSep 11, 2009

  • CVE-2008-7215
    24Monitor

    The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a

    MediumCVSS 5.8No exploitEPSS 1%

    mambo-foundation · mamboSep 11, 2009

  • CVE-2011-2499
    24Monitor

    Mambo CMS through 4.6.5 has multiple XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    mambo-foundation · mambo cmsFeb 12, 2020

  • CVE-2013-2564
    21Monitor

    Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.

    MediumCVSS 5.0No exploitEPSS 2%

    mambo-foundation · mambo cmsJun 9, 2014

  • CVE-2006-1957
    21Monitor

    The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibl

    MediumCVSS 5.0No exploitEPSS 1%

    joomla · joomla\!Apr 21, 2006

  • CVE-2013-2565
    21Monitor

    A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root pa

    MediumCVSS 5.3No exploitEPSS 1%

    mambo-foundation · mambo cmsFeb 15, 2019

  • CVE-2008-7212
    20Monitor

    MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mam

    MediumCVSS 5.0No exploitEPSS 1%

    mambo-foundation · mamboSep 11, 2009

  • CVE-2011-3754
    20Monitor

    Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path

    MediumCVSS 5.0No exploitEPSS 1%

    mambo-foundation · mamboSep 23, 2011

  • CVE-2008-2497
    20Monitor

    CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitt

    MediumCVSS 5.0No exploitEPSS 1%

    mambo-foundation · mamboMay 28, 2008

  • CVE-2008-7213
    18Monitor

    Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE

    MediumCVSS 4.3Proof of conceptEPSS 2%

    mambo-foundation · mamboSep 11, 2009

  • CVE-2009-4578
    17Monitor

    Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows remote attackers to inj

    MediumCVSS 4.3Proof of conceptEPSS 1%

    joomla · joomla\!Jan 6, 2010

  • CVE-2009-4579
    17Monitor

    Cross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for Joomla! and Mambo allows remote attackers to

    MediumCVSS 4.3No exploitEPSS 1%

    joomla · com artistavenueJan 6, 2010

  • CVE-2013-2562
    8Monitor

    Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive informati

    LowCVSS 2.1No exploitEPSS 0%

    mambo-foundation · mambo cmsJun 9, 2014