2.6

CVE-2005-3738

Exploit
globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mambo ≫ Mambo Site Server Version4.0
Mambo ≫ Mambo Site Server Version4.0.10
Mambo ≫ Mambo Site Server Version4.0.11
Mambo ≫ Mambo Site Server Version4.0.12
Mambo ≫ Mambo Site Server Version4.0.12_beta
Mambo ≫ Mambo Site Server Version4.0.12_beta_2
Mambo ≫ Mambo Site Server Version4.0.12_rc1
Mambo ≫ Mambo Site Server Version4.0.12_rc2
Mambo ≫ Mambo Site Server Version4.0.12_rc3
Mambo ≫ Mambo Site Server Version4.0.14
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.57% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0520.html
Vendor Advisory
Exploit
http://forum.mamboserver.com/showthread.php?t=66154
http://secunia.com/advisories/17622
http://securitytracker.com/id?1015258
http://www.securityfocus.com/archive/1/417215
Exploit
http://www.securityfocus.com/archive/1/426942/100/0/threaded
http://www.securityfocus.com/archive/1/427196/100/0/threaded
http://www.securityfocus.com/bid/15461
http://www.vupen.com/english/advisories/2005/2473