Approved changes feed: RSS · Atom

cpe:2.3:a:mambo:mambo_open_source:4.6:*:cvs:*:*:*:*:*

part: a version: 4.6 update: *

VendorMambo (304f59f5-f960-52df-af1a-cb4ec3226a6d)
ProductMambo Open Source (f8b8dd10-0de9-59b7-aa22-fed1d295fd40)
Editioncvs
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-7150 vulnerable 2026-06-08 04:49:30.440724 Details available
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.
Published: 2007-03-07T20:00:00.000Z
Updated: 2024-08-07T20:57:39.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2072 vulnerable 2026-06-08 04:48:08.477080 Details available
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.
Published: 2005-05-19T04:00:00.000Z
Updated: 2024-08-08T01:15:01.427Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.