Lucene search

[email protected]CVE-2006-1794

HistoryApr 17, 2006 - 10:02 a.m.

CVE-2006-1794

2006-04-1710:02:00

[email protected]

web.nvd.nist.gov

mambo

sql injection

vulnerability

remote attackers

nvd

cve-2006-1794

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.015

Percentile

86.8%

JSON

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).

Affected configurations

NVD

Node

mambomamboRange≤4.5.3hh

mambomamboMatch4.0.14

mambomamboMatch4.5.1_1.0.9

mambomamboMatch4.5.1a

mambomamboMatch4.5.1abeta

mambomamboMatch4.5.1abeta_2

mambomamboMatch4.5.2

mambomamboMatch4.5.2.1

mambomamboMatch4.5.2.2

mambomamboMatch4.5.2.3

mambomamboMatch4.5.3h

mambomamboMatch4.5_1.0.0

mambomamboMatch4.5_1.0.1

mambomamboMatch4.5_1.0.2

mambomamboMatch4.5_1.0.3_beta

mambomamboMatch4.5_1.0.3_betabeta

VendorProductVersionCPE
mambomambo4.5.1acpe:/a:mambo:mambo:4.5.1a:::
mambomambo4.5.1+1.0.9cpe:/a:mambo:mambo:4.5.1+1.0.9:::
mambomambo4.5.2.1cpe:/a:mambo:mambo:4.5.2.1:::
mambomambocpe:/a:mambo:mambo::h::
mambomambo4.5.1acpe:/a:mambo:mambo:4.5.1a:beta::
mambomambo4.5.2.2cpe:/a:mambo:mambo:4.5.2.2:::
mambomambo4.5.2.3cpe:/a:mambo:mambo:4.5.2.3:::
mambomambo4.0.14cpe:/a:mambo:mambo:4.0.14:::
mambomambo4.5+1.0.3+betacpe:/a:mambo:mambo:4.5+1.0.3+beta:::
mambomambo4.5+1.0.0cpe:/a:mambo:mambo:4.5+1.0.0:::

Vendor	Product	Version	CPE
mambo	mambo	4.5.1a	cpe:/a:mambo:mambo:4.5.1a:::
mambo	mambo	4.5.1+1.0.9	cpe:/a:mambo:mambo:4.5.1+1.0.9:::
mambo	mambo	4.5.2.1	cpe:/a:mambo:mambo:4.5.2.1:::
mambo	mambo		cpe:/a:mambo:mambo::h::
mambo	mambo	4.5.1a	cpe:/a:mambo:mambo:4.5.1a:beta::
mambo	mambo	4.5.2.2	cpe:/a:mambo:mambo:4.5.2.2:::
mambo	mambo	4.5.2.3	cpe:/a:mambo:mambo:4.5.2.3:::
mambo	mambo	4.0.14	cpe:/a:mambo:mambo:4.0.14:::
mambo	mambo	4.5+1.0.3+beta	cpe:/a:mambo:mambo:4.5+1.0.3+beta:::
mambo	mambo	4.5+1.0.0	cpe:/a:mambo:mambo:4.5+1.0.0:::