Filtered by vendor Mambo-foundation Subscriptions
Filtered by product Mambo Cms Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2011-2499 1 Mambo-foundation 1 Mambo Cms 2024-08-06 6.1 Medium
Mambo CMS through 4.6.5 has multiple XSS.
CVE-2013-2564 1 Mambo-foundation 1 Mambo Cms 2024-08-06 N/A
Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.
CVE-2013-2565 1 Mambo-foundation 1 Mambo Cms 2024-08-06 N/A
A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.
CVE-2013-2562 1 Mambo-foundation 1 Mambo Cms 2024-08-06 N/A
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.
CVE-2013-2563 1 Mambo-foundation 1 Mambo Cms 2024-08-06 N/A
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.