Mambo-foundation
Mambo-foundation Mambo CMS: vulnerabilidades y CVE
Mambo-foundation Mambo CMS tiene 5 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE5
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2011-2499 | Media (6.1) | 0.65% | — | 12 feb 2020 | Mambo CMS through 4.6.5 has multiple XSS. |
| CVE-2013-2565 | Media (5.3) | 1.6% | — | 15 feb 2019 | A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. |
| CVE-2013-2564 | Media (5) | 2.5% | — | 9 jun 2014 | Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file. |
| CVE-2013-2563 | Baja (2.1) | 0.46% | — | 9 jun 2014 | Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file. |
| CVE-2013-2562 | Baja (2.1) | 0.47% | — | 9 jun 2014 | Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors. |