Approved changes feed: RSS · Atom

cpe:2.3:a:mambo:mambo:*:h:*:*:*:*:*:*

part: a version: * update: h

VendorMambo (304f59f5-f960-52df-af1a-cb4ec3226a6d)
ProductMambo (a524a000-c2c4-5fb0-ac5e-d1d0bd7dcab9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1794 vulnerable 2026-06-08 04:48:58.050293 Details available
SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).
Published: 2006-04-17T10:00:00.000Z
Updated: 2024-08-07T17:27:28.963Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.