CVE-2013-2562

概要

参考情報

• packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt · Exploit
• seclists.org/oss-sec/2013/q1/689
• vapid.dhs.org/advisories/mambo_cms_4.6.5.html · Exploit

mambo cms のその他の脆弱性

• CVE-2011-2499中 6.1Mambo CMS through 4.6.5 has multiple XSS.
• CVE-2013-2565中 5.3A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root pa…
• CVE-2013-2564中 5.0Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file.
• CVE-2013-2563低 2.1Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading …