Approved changes feed: RSS · Atom

cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMambo Foundation (3b4944d3-9640-5daf-a9a0-0c3535b39cac)
ProductMambo (1ad603d6-d942-51b7-8f06-9b45d42e7a2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2917 vulnerable 2026-06-08 04:58:09.645103 Details available
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter.
Published: 2011-12-08T19:00:00.000Z
Updated: 2024-09-16T21:08:50.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4944 not_vulnerable 2026-06-08 04:56:31.463200 Details available
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.
Published: 2011-10-09T10:00:00.000Z
Updated: 2024-08-07T04:02:30.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4579 not_vulnerable 2026-06-08 04:51:49.022764 Details available
Cross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php.
Published: 2010-01-06T21:33:00.000Z
Updated: 2024-08-07T07:08:37.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4578 not_vulnerable 2026-06-08 04:51:49.020319 Details available
Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php.
Published: 2010-01-06T21:33:00.000Z
Updated: 2024-08-07T07:08:38.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4474 not_vulnerable 2026-06-08 04:51:48.616221 Details available
SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Published: 2009-12-30T21:00:00.000Z
Updated: 2024-08-07T07:01:20.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4199 not_vulnerable 2026-06-08 04:51:47.557081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0380 not_vulnerable 2026-06-08 04:51:09.207368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7215 vulnerable 2026-06-08 04:51:05.976739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7214 vulnerable 2026-06-08 04:51:05.976311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7213 vulnerable 2026-06-08 04:51:05.975869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7212 vulnerable 2026-06-08 04:51:05.973924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6481 not_vulnerable 2026-06-08 04:50:55.154563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-6234 not_vulnerable 2026-06-08 04:50:54.653873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4617 not_vulnerable 2026-06-08 04:50:47.267806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2498 vulnerable 2026-06-08 04:50:24.173793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2497 vulnerable 2026-06-08 04:50:24.173459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1465 not_vulnerable 2026-06-08 04:50:20.595899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0801 not_vulnerable 2026-06-08 04:50:17.827491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.