GCVE - cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*

part: a version: 4.0.11 update: *

Vendor	Mambo (`304f59f5-f960-52df-af1a-cb4ec3226a6d`)
Product	Mambo Site Server (`ff20b463-206b-57c2-929a-0156b50791e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3738`	vulnerable	2026-06-08 04:48:41.938286	Details available globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion. Published: 2005-11-22T11:00:00.000Z Updated: 2024-08-07T23:24:36.420Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/426942/100/0/threaded http://www.securityfocus.com/bid/15461 http://secunia.com/advisories/17622 http://forum.mamboserver.com/showthread.php?t=66154 http://securitytracker.com/id?1015258	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1204`	not_vulnerable	2026-06-08 04:47:23.658417	Details available Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php. Published: 2005-05-19T04:00:00.000Z Updated: 2024-08-08T02:19:45.956Z Open on db.gcve.eu Reference links http://www.osvdb.org/7505 http://www.osvdb.org/7501 http://www.osvdb.org/7495 http://www.osvdb.org/7502 http://www.osvdb.org/7496	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2290`	vulnerable	2026-06-08 04:47:19.639789	Details available Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges. Published: 2007-10-18T10:00:00.000Z Updated: 2024-08-08T03:59:11.347Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10857 http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-2247`	vulnerable	2026-06-08 04:47:19.499573	Details available The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function. Published: 2007-10-14T20:00:00.000Z Updated: 2024-08-08T03:59:11.423Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10853 http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html http://www.securityfocus.com/bid/6376	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1662`	vulnerable	2026-06-08 04:46:24.232167	Details available Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration. Published: 2005-05-19T04:00:00.000Z Updated: 2024-08-08T03:34:55.698Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10859 http://www.securityfocus.com/bid/6386 http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html https://exchange.xforce.ibmcloud.com/vulnerabilities/10854	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.