Mambo Site Server
Approved changes feed: RSS · Atom
cpe:2.3:a:mambo:mambo_site_server:4.0.12_beta:*:*:*:*:*:*:*
part: a version: 4.0.12_beta update: *
| Vendor | Mambo (304f59f5-f960-52df-af1a-cb4ec3226a6d) |
|---|---|
| Product | Mambo Site Server (ff20b463-206b-57c2-929a-0156b50791e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-3738 |
vulnerable | 2026-06-08 04:48:41.944647 |
Details available
globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.
Published: 2005-11-22T11:00:00.000Z
Updated: 2024-08-07T23:24:36.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-1204 |
not_vulnerable | 2026-06-08 04:47:23.659417 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php.
Published: 2005-05-19T04:00:00.000Z
Updated: 2024-08-08T02:19:45.956Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.