PT-2007-3876 · Mambo · Mambo

Publicado 2007-05-09 · Atualizado 2008-11-15 · CVE-2007-2557

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mambo version 4.6.1

Description The MOStlyDB Admin in Mambo does not properly check privileges, which allows remote authenticated administrators to have an unknown impact. The details of this issue are obtained solely from third-party information, and the provenance is unknown.

Recommendations For Mambo version 4.6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-2557

Produtos afetados

Mambo

Referências · 3

• http://secunia.com/advisories/25039 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2557 · Nota de Segurança
• http://osvdb.org/35540 · Nota