CVE-2004-1692

Published: Sep 18, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.

Affected (1)

Products: Mambo: Mambo Open Source

Mambo

1 product

Mambo Open Source

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mambo Mambo Open Source	Version 4.5_1.0.9

References (10)

http://mamboforge.net/frs/shownotes.php?release_id=1672

Source: cve@mitre.org

Patch

http://marc.info/?l=bugtraq&m=109571849713158&w=2

Source: cve@mitre.org

http://www.osvdb.org/10179

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/11220

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/20616

Source: cve@mitre.org

http://mamboforge.net/frs/shownotes.php?release_id=1672