| Package | Affected versions | Patched versions |
|---|---|---|
| mambo cms | = 4.6.5 |
Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free