NVD

Id
60499  
Name
CVE-2006-1794  
Description
SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-04-17  
Modified Date
2011-03-07  
Seq
2006-1794  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
312099 60499 CVE-2006-1794 20060224 Mambo Multiple Vulnerabilities  View
312100 60499 CVE-2006-1794 http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/  View
312101 60499 CVE-2006-1794 http://www.gulftech.org/?node=research&article_id=00104-02242006  View
312102 60499 CVE-2006-1794 16775  View
312103 60499 CVE-2006-1794 ADV-2006-0719  View
312104 60499 CVE-2006-1794 mambo-index2-sql-injection(24951)  View

Related JVN