Sploitus

75 exploited vulnerabilities in Mambo

Showing 1–50 of 75, highest-scoring first

Vendors
Open Source Matters, Mambo Foundation, Mambo Joomla, Mambo, Joomla, Detodas
With known exploits
75
Affected Joomla Swmenu Component versions
= 4.0
Affected Mambo Swmenu Component versions
= 4.0
Affected Detodas Com Restaurante versions
= 1.0
Affected Mambo versions
All versions
Affected Joomla Com Weblinks versions
≤ 1.0.9
Affected Joomla Com Elite Experts versions
All versions
Affected Gigcalendar Com Gigcalendar versions
= 1.0
Affected Simple-review Com Simple Review versions
= 1.3.5

Vulnerabilities with exploits

Highest CVSS first — 44 of these already have exploit code on Sploitus

CVE-2007-1699 1 exploit
CVSS 10.0 HIGH 2007-03-27FIX AVAILABLE
Joomla! / Mambo Component SWmenu 4.0 - Remote File Inclusion
CVE-2003-1245 1 exploit
CVSS 10.0 HIGH 2003-12-31FIX AVAILABLE
Mambo Site Server 4.0.12 RC2 - Cookie Validation
CVE-2008-1465 1 exploit
CVSS 9.3 HIGH 2008-03-24
Joomla! Component Restaurante 1.0 - 'id' SQL Injection
CVE-2006-1794 2 exploits
CVSS 7.6 HIGH 2006-04-17
Mambo 4.5.3h - Multiple VulnerabilitiesMambo < 4.5.3h - Multiple Vulnerabilities
CVE-2006-7247 1 exploit
CVSS 7.5 HIGH 2012-09-06FIX AVAILABLE
Joomla! 1.0.9 - 'Weblinks' Blind SQL Injection
CVE-2010-4944 1 exploit
CVSS 7.5 HIGH 2011-10-09
Joomla! Component Elite Experts - SQL Injection
CVE-2009-0726 1 exploit
CVSS 7.5 HIGH 2009-02-24FIX AVAILABLE
Joomla! Component gigCalendar 1.0 - SQL Injection
CVE-2009-0706
CVSS 7.5 HIGH 2009-02-23FIX AVAILABLE
CVE-2008-6653 1 exploit
CVSS 7.5 HIGH 2009-04-07FIX AVAILABLE
Joomla! Component Webhosting - 'catid' Blind SQL Injection
CVE-2008-6481 1 exploit
CVSS 7.5 HIGH 2009-03-17FIX AVAILABLE
Joomla! Component versioning 1.0.2 - 'id' SQL Injection
CVE-2008-6234 1 exploit
CVSS 7.5 HIGH 2009-02-21
Mambo Component com_Musica - 'id' SQL Injection
CVE-2008-4777 1 exploit
CVSS 7.5 HIGH 2008-10-29
Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection
CVE-2008-2093 1 exploit
CVSS 7.5 HIGH 2008-05-06
Joomla! Component Community Builder 1.0.1 - Blind SQL Injection
CVE-2008-0854 1 exploit
CVSS 7.5 HIGH 2008-02-21
Joomla! / Mambo Component com_salesrep - 'rid' SQL Injection
CVE-2008-0853 1 exploit
CVSS 7.5 HIGH 2008-02-21FIX AVAILABLE
Joomla! / Mambo Component com_detail - 'id' SQL Injection
CVE-2008-0849
CVSS 7.5 HIGH 2008-02-21
CVE-2008-0841 1 exploit
CVSS 7.5 HIGH 2008-02-20FIX AVAILABLE
Mambo Component Ricette 1.0 - SQL Injection
CVE-2008-0832 1 exploit
CVSS 7.5 HIGH 2008-02-20FIX AVAILABLE
Mambo Component Quran 1.1 - 'surano' SQL Injection
CVE-2008-0817 1 exploit
CVSS 7.5 HIGH 2008-02-19
Joomla! / Mambo Component Filebase - 'filecatid' SQL Injection
CVE-2008-0816 1 exploit
CVSS 7.5 HIGH 2008-02-19
Joomla! / Mambo Component com_sg - 'pid' SQL Injection
CVE-2008-0810 1 exploit
CVSS 7.5 HIGH 2008-02-19
Joomla! / Mambo Component com_scheduling - 'id' SQL Injection
CVE-2008-0772 1 exploit
CVSS 7.5 HIGH 2008-02-13
Joomla! Component com_doc - SQL Injection
CVE-2008-0746 1 exploit
CVSS 7.5 HIGH 2008-02-13
Mambo Component com_gallery - SQL Injection
CVE-2008-0652 1 exploit
CVSS 7.5 HIGH 2008-02-07
Mambo Component com_downloads - SQL Injection
CVE-2008-0607
CVSS 7.5 HIGH 2008-02-06FIX AVAILABLE
CVE-2008-0606 1 exploit
CVSS 7.5 HIGH 2008-02-06FIX AVAILABLE
Mambo Component Shambo2 - 'itemID' SQL Injection
CVE-2008-0603 1 exploit
CVSS 7.5 HIGH 2008-02-06FIX AVAILABLE
Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection
CVE-2008-0562 1 exploit
CVSS 7.5 HIGH 2008-02-04FIX AVAILABLE
Mambo Component Restaurant 1.0 - SQL Injection
CVE-2008-0561 1 exploit
CVSS 7.5 HIGH 2008-02-04FIX AVAILABLE
Mambo Component 'com_akogallery' 2.5b - SQL Injection
CVE-2008-0515 1 exploit
CVSS 7.5 HIGH 2008-01-31
Mambo Component musepoes - 'aid' SQL Injection
CVE-2008-0514 1 exploit
CVSS 7.5 HIGH 2008-01-31FIX AVAILABLE
Mambo Component 'com_glossary' 2.0 - 'catid' SQL Injection
CVE-2008-0512 1 exploit
CVSS 7.5 HIGH 2008-01-31FIX AVAILABLE
Mambo Component 'com_fq' - 'listid' SQL Injection
CVE-2008-0511 1 exploit
CVSS 7.5 HIGH 2008-01-31FIX AVAILABLE
Mambo Component 'com_mamml' - 'listid' SQL Injection
CVE-2008-0510 1 exploit
CVSS 7.5 HIGH 2008-01-31
Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection
CVE-2007-4505 1 exploit
CVSS 7.5 HIGH 2007-08-23
Mambo Component Remository - 'cat' SQL Injection
CVE-2007-4456 1 exploit
CVSS 7.5 HIGH 2007-08-21FIX AVAILABLE
Mambo Component SimpleFAQ 2.11 - SQL Injection
CVE-2007-2044 1 exploit
CVSS 7.5 HIGH 2007-04-16FIX AVAILABLE
Mambo Module Weather - 'absolute_path' Remote File Inclusion
CVE-2007-0374 1 exploit
CVSS 7.5 HIGH 2007-01-19FIX AVAILABLE
joomla150beta-sql.txt
CVE-2006-7150
CVSS 7.5 HIGH 2007-03-07FIX AVAILABLE
CVE-2006-7104 1 exploit
CVSS 7.5 HIGH 2007-03-03
Mambo Module MOStlyCE 4.5.4 - 'HTMLTemplate.php' Remote File Inclusion
CVE-2006-6051 1 exploit
CVSS 7.5 HIGH 2006-11-22
Joomla! Component MosReporter 0.9.3 - Remote File Inclusion
CVE-2006-6049
CVSS 7.5 HIGH 2006-11-22
CVE-2006-4363 1 exploit
CVSS 7.5 HIGH 2006-08-25
Mambo Component cropimage 1.0 - Remote File Inclusion
CVE-2006-4322 1 exploit
CVSS 7.5 HIGH 2006-08-24FIX AVAILABLE
Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion
CVE-2006-4296 1 exploit
CVSS 7.5 HIGH 2006-08-23FIX AVAILABLE
Mambo Component bigAPE-Backup 1.1 - Remote File Inclusion
CVE-2006-4263
CVSS 7.5 HIGH 2006-08-21
CVE-2006-4203 1 exploit
CVSS 7.5 HIGH 2006-08-17FIX AVAILABLE
Mambo Component MMP 1.2 - Remote File Inclusion
CVE-2006-3962 1 exploit
CVSS 7.5 HIGH 2006-08-01
Joomla! Component com_bayesiannaivefilter 1.1 - Remote File Inclusion
CVE-2006-3951 1 exploit
CVSS 7.5 HIGH 2006-08-01
Mambo Component Mam-Moodle alpha - Remote File Inclusion
CVE-2006-3736 1 exploit
CVSS 7.5 HIGH 2006-07-19
Mambo Component com_videodb 0.3en - Remote File Inclusion