GCVE - cpe:2.3:a:mambo:mambo:4.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mambo:mambo:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

Vendor	Mambo (`304f59f5-f960-52df-af1a-cb4ec3226a6d`)
Product	Mambo (`a524a000-c2c4-5fb0-ac5e-d1d0bd7dcab9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2905`	vulnerable	2026-06-08 04:50:32.517035	Details available PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Published: 2008-06-30T18:00:00.000Z Updated: 2024-08-07T09:21:33.899Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5808 http://secunia.com/advisories/30685 http://www.securityfocus.com/bid/29716 http://www.securitytracker.com/id?1020295 https://exchange.xforce.ibmcloud.com/vulnerabilities/43101	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0795`	vulnerable	2026-06-08 04:50:17.815916	Details available SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an answer action. Published: 2008-02-15T21:00:00.000Z Updated: 2024-08-07T08:01:39.834Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/27784 https://exchange.xforce.ibmcloud.com/vulnerabilities/40494 https://www.exploit-db.com/exploits/5109	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0517`	vulnerable	2026-06-08 04:50:16.969880	Details available SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action. Published: 2008-01-31T19:30:00.000Z Updated: 2024-08-07T07:46:54.802Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/40060 http://www.securityfocus.com/bid/27520 https://www.exploit-db.com/exploits/5016 http://www.vupen.com/english/advisories/2008/0362	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0510`	vulnerable	2026-06-08 04:50:16.957697	Details available SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter. Published: 2008-01-31T19:30:00.000Z Updated: 2024-08-07T07:46:55.072Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5007 https://exchange.xforce.ibmcloud.com/vulnerabilities/40036 http://www.vupen.com/english/advisories/2008/0354 http://www.securityfocus.com/bid/27502	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.