Approved changes feed: RSS · Atom

cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMambo (304f59f5-f960-52df-af1a-cb4ec3226a6d)
ProductMambo (a524a000-c2c4-5fb0-ac5e-d1d0bd7dcab9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3434 not_vulnerable 2026-06-08 04:51:41.939525 Details available
SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the proyecto parameter in a verproyecto action to index.php.
Published: 2009-09-28T22:00:00.000Z
Updated: 2024-08-07T06:31:09.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3333 not_vulnerable 2026-06-08 04:51:33.321322 Details available
PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Published: 2009-09-23T10:00:00.000Z
Updated: 2024-08-07T06:22:24.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0730 not_vulnerable 2026-06-08 04:51:11.001953 Details available
Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726.
Published: 2009-02-24T23:00:00.000Z
Updated: 2024-08-07T04:48:51.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0726 not_vulnerable 2026-06-08 04:51:10.995513 Details available
SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcal_gigs_id parameter in a details action to index.php.
Published: 2009-02-24T23:00:00.000Z
Updated: 2024-08-07T04:48:51.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0706 not_vulnerable 2026-06-08 04:51:10.954486 Details available
SQL injection vulnerability in the Simple Review (com_simple_review) component 1.3.5 for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php.
Published: 2009-02-23T15:00:00.000Z
Updated: 2024-08-07T04:48:51.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6814 not_vulnerable 2026-06-08 04:51:04.865766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6653 not_vulnerable 2026-06-08 04:51:04.503248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5643 not_vulnerable 2026-06-08 04:50:52.157209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5226 vulnerable 2026-06-08 04:50:50.165712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5208 not_vulnerable 2026-06-08 04:50:50.132864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5200 not_vulnerable 2026-06-08 04:50:50.123350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4777 not_vulnerable 2026-06-08 04:50:48.155925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1849 not_vulnerable 2026-06-08 04:50:22.104373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1460 not_vulnerable 2026-06-08 04:50:20.586213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1459 not_vulnerable 2026-06-08 04:50:20.584135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0829 vulnerable 2026-06-08 04:50:17.886407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0561 vulnerable 2026-06-08 04:50:17.138641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5362 vulnerable 2026-06-08 04:50:04.952120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5177 vulnerable 2026-06-08 04:50:04.523164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4456 vulnerable 2026-06-08 04:49:56.338970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0789 vulnerable 2026-06-08 04:49:33.399024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0512 vulnerable 2026-06-08 04:48:12.877072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.