PT-2019-6894 · Mambo · Mambo Cms

Larry W. Cashdollar + 1 · Published 2019-02-15 · Updated 2019-04-15 · CVE-2013-2565

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5

Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver.

Recommendations For Mambo CMS version 4.6.5, consider restricting access to the vulnerable scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2013-2565

Affected Products

Mambo Cms

References · 4

• 🔥 http://vapidlabs.com/advisory.php?v=75 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2565 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2565 · Note
• http://sourceforge.net/projects/mambo · Note