PT-2006-2940 · Mambo+1 · Mambo+1

Published 2006-04-21 · Updated 2024-02-14 · CVE-2006-1956

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mambo (affected versions not specified) Joomla! (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message. This is related to the com rss option in the rss.php file.

Recommendations For Mambo, consider restricting access to the rss.php file until a fix is available. For Joomla!, avoid using the com rss option with invalid feed parameters until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-1956

Affected Products

Joomla!

Mambo

References · 5

• 🔥 http://irannetjob.com/content/view/209/28 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1956 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1956 · Note
• http://kapda.ir/advisory-313.html · Note
• http://securityfocus.com/archive/1/431317/100/0/threaded · Note