PT-2004-3038 · Mambo · Mambo Portal

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2143

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mambo Portal versions 4.5.1 (1.09) and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the filecatid parameter in the com remository option.

Recommendations For versions 4.5.1 (1.09) and earlier, avoid using the filecatid parameter in the com remository option until the issue is resolved. Restrict access to the com remository module to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-2143

Affected Products

Mambo Portal

References · 10

• 🔥 https://exploit-db.com/exploits/24613 · Exploit
• 🔥 http://securitytracker.com/id?1011356 · Exploit
• 🔥 http://secunia.com/advisories/12597 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2143 · Security Note
• http://mamboportal.com/content/view/1615 · Vendor Advisory
• http://securityfocus.com/bid/11219 · Note
• http://osvdb.org/10040 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-09/0249.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17441 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-09/0215.html · Note