İçeriğe atla
Noroxi

mambo-foundation kayıtları

mambo-foundation üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
13
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2008-1465
    37İzleyin

    SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to exec

    KritikCVSS 9,3Kavram kanıtıEPSS %1

    detodas · com restaurante24 Mar 2008

  • CVE-2011-2917
    30İzleyin

    SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL comm

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    mambo-foundation · mambo8 Ara 2011

  • CVE-2009-0380
    30İzleyin

    SQL injection vulnerability in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) RC 2.8.2 component for Joomla! and Mambo allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    joomla · joomla2 Şub 2009

  • CVE-2006-7247
    30İzleyin

    SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to exec

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    joomla · com weblinks6 Eyl 2012

  • CVE-2008-2498
    30İzleyin

    Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow remote attackers to exec

    YüksekCVSS 7,5İstismar yokEPSS %1

    mambo-foundation · mambo28 May 2008

  • CVE-2008-0801
    30İzleyin

    SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    paxxgallery · com paxxgallery15 Şub 2008

  • CVE-2008-4617
    30İzleyin

    SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id par

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    joomla · joomla20 Eki 2008

  • CVE-2008-6234
    30İzleyin

    SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    joomla · com musica20 Şub 2009

  • CVE-2008-6481
    30İzleyin

    SQL injection vulnerability in the Versioning component (com_versioning) 1.0.2 in Joomla! and Mambo allows remote attackers to execute arbit

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    joomla · joomla17 Mar 2009

  • CVE-2009-4474
    30İzleyin

    SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to execute arbitrary SQL com

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    mikedeboer · com zoom30 Ara 2009

  • CVE-2010-4944
    30İzleyin

    SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbi

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    joomla · com elite experts9 Eki 2011

  • CVE-2009-4199
    27İzleyin

    Multiple SQL injection vulnerabilities in the Mambo Resident (aka Mos Res or com_mosres) component 1.0f for Mambo and Joomla!, when magic_qu

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    joomla · joomla\!4 Ara 2009

  • CVE-2008-7214
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allo

    OrtaCVSS 6,8İstismar yokEPSS %0

    mambo-foundation · mambo11 Eyl 2009

  • CVE-2008-7215
    24İzleyin

    The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a

    OrtaCVSS 5,8İstismar yokEPSS %1

    mambo-foundation · mambo11 Eyl 2009

  • CVE-2011-2499
    24İzleyin

    Mambo CMS through 4.6.5 has multiple XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    mambo-foundation · mambo cms12 Şub 2020

  • CVE-2013-2564
    21İzleyin

    Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.

    OrtaCVSS 5,0İstismar yokEPSS %2

    mambo-foundation · mambo cms9 Haz 2014

  • CVE-2006-1957
    21İzleyin

    The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibl

    OrtaCVSS 5,0İstismar yokEPSS %1

    joomla · joomla\!21 Nis 2006

  • CVE-2013-2565
    21İzleyin

    A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root pa

    OrtaCVSS 5,3İstismar yokEPSS %1

    mambo-foundation · mambo cms15 Şub 2019

  • CVE-2008-7212
    20İzleyin

    MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mam

    OrtaCVSS 5,0İstismar yokEPSS %1

    mambo-foundation · mambo11 Eyl 2009

  • CVE-2011-3754
    20İzleyin

    Mambo 4.6.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path

    OrtaCVSS 5,0İstismar yokEPSS %1

    mambo-foundation · mambo23 Eyl 2011

  • CVE-2008-2497
    20İzleyin

    CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitt

    OrtaCVSS 5,0İstismar yokEPSS %1

    mambo-foundation · mambo28 May 2008

  • CVE-2008-7213
    18İzleyin

    Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    mambo-foundation · mambo11 Eyl 2009

  • CVE-2009-4578
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows remote attackers to inj

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    joomla · joomla\!6 Oca 2010

  • CVE-2009-4579
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for Joomla! and Mambo allows remote attackers to

    OrtaCVSS 4,3İstismar yokEPSS %1

    joomla · com artistavenue6 Oca 2010

  • CVE-2013-2562
    8İzleyin

    Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive informati

    DüşükCVSS 2,1İstismar yokEPSS %0

    mambo-foundation · mambo cms9 Haz 2014