Vulnerability Details CVE-2005-2002
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://mamboforge.net/frs/download.php/6153/CHANGELOG
- http://marc.info/?l=bugtraq&m=111885974124936&w=2
- http://secunia.com/advisories/15710
- http://securitytracker.com/id?1014222
- http://www.osvdb.org/17323
- http://www.securityfocus.com/bid/13966
- http://mamboforge.net/frs/download.php/6153/CHANGELOG
- http://marc.info/?l=bugtraq&m=111885974124936&w=2
- http://secunia.com/advisories/15710
- http://securitytracker.com/id?1014222
- http://www.osvdb.org/17323
- http://www.securityfocus.com/bid/13966
Products affected by CVE-2005-2002
-
cpe:2.3:a:mambo:mambo:4.5.0.2
-
cpe:2.3:a:mambo:mambo:4.5.1.3
-
cpe:2.3:a:mambo:mambo:4.5.1a
-
cpe:2.3:a:mambo:mambo:4.5.2
-
cpe:2.3:a:mambo:mambo:4.5.2.2
-
cpe:2.3:a:mambo:mambo:4.5_1.0.9