Mambo-foundation Mambo Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Mambo-foundation Mambo Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2011-2499 — CVSS 6.1 (medium): Mambo CMS through 4.6.5 has multiple XSS.
• CVE-2013-2565 — CVSS 5.3 (medium): A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root…
• CVE-2013-2564 — CVSS 5.0 (medium): Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.
• CVE-2013-2562 — CVSS 2.1 (low): Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive…
• CVE-2013-2563 — CVSS 2.1 (low): Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading…