Vendor Dictionary: Mambo Open Source

Mambo Open Source

Short Name:	Mambo
Previous Names:	MOS, Mambo Open Source
URL:	http://mambo-foundation.org/ [visit link]
Email:	[None Entered]
Security URL:	http://forum.mambo-foundation.org/forumdisplay.php?f=151 [visit link]
Security Email:	securitymambo-foundation.org
Knowledge Base:	http://docs.mambo-foundation.org/ [visit link]
Notes:	Please use the correct name of this software. It is Mambo. Not

Vulnerabilities by Vendor Product

Mambo Open Source

Mambo Open Source

Mambo: 4.5.3; OSVDB ID: 23402 Mambo content.php 'filter' Parameter SQL Injection; OSVDB ID: 23503 Mambo mambo.php Multiple Parameter SQL Injection; OSVDB ID: 23505 Mambo mambo.php 'mos_change_template' Parameter Local File Inclusion; 4.5.3h; OSVDB ID: 23402 Mambo content.php 'filter' Parameter SQL Injection; OSVDB ID: 23503 Mambo mambo.php Multiple Parameter SQL Injection; OSVDB ID: 23505 Mambo mambo.php 'mos_change_template' Parameter Local File Inclusion

Mambo Server: 3.0; OSVDB ID: 1911 Mambo Open Source index2.php Administrator Password Bypass; 3.0.1; OSVDB ID: 1911 Mambo Open Source index2.php Administrator Password Bypass; 3.0.2; OSVDB ID: 1911 Mambo Open Source index2.php Administrator Password Bypass; 3.0.3; OSVDB ID: 1911 Mambo Open Source index2.php Administrator Password Bypass; 3.0.4; OSVDB ID: 1911 Mambo Open Source index2.php Administrator Password Bypass; 3.0.5; OSVDB ID: 1911 Mambo Open Source index2.php Administrator Password Bypass; 4.0.14; OSVDB ID: 2166 Mambo Open Source banners.php Information Disclosure; OSVDB ID: 2959 Mambo Open Source pollBooth.php dbprefix Parameter SQL Injection; OSVDB ID: 7483 Mambo Open Source articles.php artid Parameter SQL Injection; OSVDB ID: 7484 Mambo Open Source banners.php bid Parameter SQL Injection; OSVDB ID: 7485 Mambo Open Source emailarticle.php id Parameter SQL Injection; OSVDB ID: 7486 Mambo Open Source emailfaq.php id Parameter SQL Injection; OSVDB ID: 7487 Mambo Open Source contact.php Unauthorized Mail Relay; 4.5 Beta 1.0.3; OSVDB ID: 2959 Mambo Open Source pollBooth.php dbprefix Parameter SQL Injection; OSVDB ID: 7483 Mambo Open Source articles.php artid Parameter SQL Injection; 4.5.3h; OSVDB ID: 26624 Mambo Web Link Submission title Parameter SQL Injection; 4.6rc1; OSVDB ID: 26624 Mambo Web Link Submission title Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.