CVE-2004-1825

Published: Mar 16, 2004Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters.

Affected (2)

Products: Mambo: Mambo Open Source

Mambo

1 product

Mambo Open Source

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mambo Mambo Open Source	Version 4.5_1.0.0
Mambo Mambo Open Source	Version 4.5_1.0.1

References (12)

http://marc.info/?l=bugtraq&m=107945576020593&w=2

Source: cve@mitre.org

http://secunia.com/advisories/11140

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.osvdb.org/4308

Source: cve@mitre.org

http://www.osvdb.org/4665

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/9890

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15499

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=107945576020593&w=2