CVE-2008-2905
medium · 6.8PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
6.8
CVSS
18.4%
EPSS (exploit prob.)
97th
EPSS percentile
2008-06-30
Published
AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| mambo | mambo | 4.0.14 |
| mambo | mambo | 4.5 |
| mambo | mambo | 4.5.0.2 |
| mambo | mambo | 4.5.1.3 |
| mambo | mambo | 4.5.1_1.0.9 |
| mambo | mambo | 4.5.1_beta |
| mambo | mambo | 4.5.1_beta2 |
| mambo | mambo | 4.5.1a |
| mambo | mambo | 4.5.2 |
| mambo | mambo | 4.5.2.1 |
| mambo | mambo | 4.5.2.2 |
| mambo | mambo | 4.5.2.3 |
| mambo | mambo | 4.5.3h |
| mambo | mambo | 4.5.4 |
| mambo | mambo | 4.5_1.0.0 |
| mambo | mambo | 4.5_1.0.1 |
| mambo | mambo | 4.5_1.0.2 |
| mambo | mambo | 4.5_1.0.3_beta |
| mambo | mambo | 4.5_1.0.9 |
| mambo | mambo | 4.6 |
| mambo | mambo | 4.6.1 |
| mambo | mambo | 4.6.2 |
| mambo | mambo | 4.6.4 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/30685
- http://www.securityfocus.com/bid/29716
- http://www.securitytracker.com/id?1020295
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43101
- https://www.exploit-db.com/exploits/5808
- http://secunia.com/advisories/30685
- http://www.securityfocus.com/bid/29716
- http://www.securitytracker.com/id?1020295
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43101
- https://www.exploit-db.com/exploits/5808
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-2905