CVE-2005-4156

Published: Dec 11, 2005Modified: Apr 16, 2026

9.4

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Exploitability: 10.0 / Impact: 9.2

Source: NVD

Description

Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.

Affected (6)

Products: Mambo: Mambo Open Source 4.5

Mambo

1 product

Mambo Open Source 4.5

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Mambo Mambo Open Source 4.5	Version 1.0.0
Mambo Mambo Open Source 4.5	Version 1.0.1
Mambo Mambo Open Source 4.5	Version 1.0.2
Mambo Mambo Open Source 4.5	Version 1.0.3
Mambo Mambo Open Source 4.5	Version 1.0.3_beta
Mambo Mambo Open Source 4.5	Version 1.0.9

References (4)

http://securitytracker.com/alerts/2005/Nov/1015176.html

Source: cve@mitre.org

http://www.procheckup.com/Vulner_PR0511.php

Source: cve@mitre.org

http://securitytracker.com/alerts/2005/Nov/1015176.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.procheckup.com/Vulner_PR0511.php

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.