GCVE - cpe:2.3:a:mambo-foundation:mambo_cms:4.6.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mambo-foundation:mambo_cms:4.6.5:*:*:*:*:*:*:*

part: a version: 4.6.5 update: *

Vendor	Mambo Foundation (`3b4944d3-9640-5daf-a9a0-0c3535b39cac`)
Product	Mambo Cms (`bd92f3a1-83cd-5b0a-bc56-f8e104b9d7cd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/mambo`	purl2cpe	2026-06-01 10:14:06.280785

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2565`	vulnerable	2026-06-08 05:04:26.813020	Details available A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Published: 2019-02-15T21:00:00.000Z Updated: 2024-08-06T15:44:32.128Z Open on db.gcve.eu Reference links http://sourceforge.net/projects/mambo/ http://www.vapidlabs.com/advisory.php?v=75	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2564`	vulnerable	2026-06-08 05:04:26.811640	Details available Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file. Published: 2014-06-09T19:00:00.000Z Updated: 2024-08-06T15:44:32.325Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2013/q1/689 http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2563`	vulnerable	2026-06-08 05:04:26.811309	Details available Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file. Published: 2014-06-09T19:00:00.000Z Updated: 2024-08-06T15:44:32.059Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2013/q1/689 http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2562`	vulnerable	2026-06-08 05:04:26.810891	Details available Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors. Published: 2014-06-09T19:00:00.000Z Updated: 2024-08-06T15:44:32.098Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2013/q1/689 http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.