PT-2007-3876 · Mambo · Mambo

Published 2007-05-09 · Updated 2008-11-15 · CVE-2007-2557

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mambo version 4.6.1

Description The MOStlyDB Admin in Mambo does not properly check privileges, which allows remote authenticated administrators to have an unknown impact. The details of this issue are obtained solely from third-party information, and the provenance is unknown.

Recommendations For Mambo version 4.6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-2557

Affected Products

Mambo

References · 3

• http://secunia.com/advisories/25039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2557 · Security Note
• http://osvdb.org/35540 · Note