[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ff2afADKOpHSBIHEKIF70GCBBPlz0QxyfC9Il5ZEht0M":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":259,"kevVulnerabilities":312,"topProductsByCves":313,"seoMetadata":324,"meta":333},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":258},18740,"mambo",65,123,0,85,"2009-09-28","m",[16,20,26,32,38,42,46,50,54,58,62,65,69,73,77,81,85,89,93,96,99,103,106,110,114,117,120,123,126,129,133,136,140,144,148,152,155,159,162,165,169,173,177,181,185,188,191,195,199,203,207,211,215,218,222,226,230,233,236,239,242,246,249,252,255],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},106024,24,40,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},106031,"mambo_site_server",16,9,"2007-09-06",{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},106028,"mambo_open_source",6,7,"2008-01-15",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},105995,"com_facileforms",1,2,"2008-07-02",{"id":39,"product_name":40,"version_count":30,"cve_count":36,"kev_count":11,"last_cve_update":41},106029,"mambo_open_source_4.5","2005-12-11",{"id":43,"product_name":44,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":45},106033,"mostlyce","2008-05-29",{"id":47,"product_name":48,"version_count":36,"cve_count":36,"kev_count":11,"last_cve_update":49},106025,"mambo_calendar","2007-04-16",{"id":51,"product_name":52,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":53},106026,"mambo_gallery_manager","2006-08-05",{"id":55,"product_name":56,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":57},105993,"com_downloads","2008-02-21",{"id":59,"product_name":60,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":61},105990,"com_comprofiler_component","2006-09-06",{"id":63,"product_name":64,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":57},105991,"com_detail",{"id":66,"product_name":67,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":68},105992,"com_doc","2008-02-14",{"id":70,"product_name":71,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":72},105994,"com_ewriting","2008-03-12",{"id":74,"product_name":75,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":76},105996,"com_filebase_component","2008-02-19",{"id":78,"product_name":79,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":80},105997,"com_flippingbook","2008-05-06",{"id":82,"product_name":83,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":84},105998,"com_gallery","2008-02-13",{"id":86,"product_name":87,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":88},105999,"com_garyscookbook","2008-03-04",{"id":90,"product_name":91,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":92},106000,"com_jokes","2008-01-31",{"id":94,"product_name":95,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":92},106001,"com_mamml",{"id":97,"product_name":98,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":84},106002,"com_neogallery",{"id":100,"product_name":101,"version_count":36,"cve_count":35,"kev_count":11,"last_cve_update":102},106003,"com_neoreferences","2008-02-12",{"id":104,"product_name":105,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":92},106004,"com_newsletter",{"id":107,"product_name":108,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":109},106005,"com_profile","2008-02-20",{"id":111,"product_name":112,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":113},106006,"com_quiz","2008-02-15",{"id":115,"product_name":116,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":92},106007,"com_recipes",{"id":118,"product_name":119,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":109},106008,"com_ricette_component",{"id":121,"product_name":122,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":57},106009,"com_salesrep",{"id":124,"product_name":125,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":76},106010,"com_scheduling_component",{"id":127,"product_name":128,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":102},106011,"com_sermon",{"id":130,"product_name":131,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":132},106012,"com_shambo2","2008-02-06",{"id":134,"product_name":135,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":132},106013,"com_sobi2",{"id":137,"product_name":138,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":139},106014,"contacts_xtd_component","2006-08-26",{"id":141,"product_name":142,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":143},106015,"datsogallery","2008-03-28",{"id":145,"product_name":146,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":147},106016,"extcalthai_module","2006-12-18",{"id":149,"product_name":150,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":151},106017,"flatmenu","2007-03-27",{"id":153,"product_name":154,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":92},106018,"glossary",{"id":156,"product_name":157,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":158},106019,"jambook","2007-04-24",{"id":160,"product_name":161,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":61},106020,"jim_component",{"id":163,"product_name":164,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":109},106021,"kemas_antonius_com_quran",{"id":166,"product_name":167,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":168},106022,"mambatstaff","2006-08-01",{"id":170,"product_name":171,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":172},106023,"mambelfish_component","2006-08-21",{"id":174,"product_name":175,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":176},106027,"mambo_multibanners","2006-07-25",{"id":178,"product_name":179,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":180},106030,"mambo_portal","2004-12-31",{"id":182,"product_name":183,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":184},106032,"moslistmessenger_component","2006-08-18",{"id":186,"product_name":187,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":172},106034,"mtg_myhomepage_component",{"id":189,"product_name":190,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":92},106035,"musepoes_component",{"id":192,"product_name":193,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":194},106036,"nfn_address_book","2007-03-22",{"id":196,"product_name":197,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":198},106037,"prince_clan_chess_component","2006-09-27",{"id":200,"product_name":201,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":202},106038,"remository","2007-08-23",{"id":204,"product_name":205,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":206},106039,"sitemap","2006-07-21",{"id":208,"product_name":209,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":210},106040,"site_server","2002-12-31",{"id":212,"product_name":213,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":214},106041,"smf-forum","2006-07-24",{"id":216,"product_name":217,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":151},106042,"swmenu_component",{"id":219,"product_name":220,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":221},106043,"taskhopper_component","2007-04-12",{"id":223,"product_name":224,"version_count":225,"cve_count":35,"kev_count":11,"last_cve_update":206},106044,"videodb",3,{"id":227,"product_name":228,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":229},105981,"a6mambocredits_component","2006-08-22",{"id":231,"product_name":232,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":172},106045,"x-shop_component",{"id":234,"product_name":235,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":172},105982,"anjel_component",{"id":237,"product_name":238,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":168},105983,"artlinks_component",{"id":240,"product_name":241,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":168},105984,"bayesiannaivefilter",{"id":243,"product_name":244,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":245},105985,"bigape-backup_component","2006-08-23",{"id":247,"product_name":248,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":172},105986,"catalogshop_component",{"id":250,"product_name":251,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":132},105987,"com_awesom",{"id":253,"product_name":254,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":68},105988,"com_comments",{"id":256,"product_name":257,"version_count":11,"cve_count":35,"kev_count":11,"last_cve_update":80},105989,"com_comprofiler","Mambo is a technology vendor with 65 tracked products and 123 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[260,269,274,280,285,289,293,297,301,308],{"cveId":261,"description":262,"publishedDate":263,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":268},"CVE-2007-5362","Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) credits.html.php, (2) info.html.php, (3) media.divs.php, (4) media.divs.js.php, (5) purchase.html.php, or (6) support.html.php in includes\u002F.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: vector 3 may be the same as CVE-2007-2043.2.","2007-10-11",6.8,"v2","Medium",false,0.36535,{"cveId":270,"description":271,"publishedDate":272,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":273},"CVE-2008-2905","PHP remote file inclusion vulnerability in includes\u002FCache\u002FLite\u002FOutput.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.","2008-06-30",0.18401,{"cveId":275,"description":276,"publishedDate":151,"cvssScore":277,"cvssVersion":265,"severity":278,"isKev":267,"epssScore":279},"CVE-2007-1699","Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to ImageManager\u002FClasses\u002FImageManager.php under the (1) components\u002F or (2) administrator\u002Fcomponents\u002F directory trees.",10,"Critical",0.10574,{"cveId":281,"description":282,"publishedDate":194,"cvssScore":283,"cvssVersion":265,"severity":278,"isKev":267,"epssScore":284},"CVE-2007-1596","Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) components\u002Fcom_nfn_addressbook\u002Fnfnaddressbook.php or (2) administrator\u002Fcomponents\u002Fcom_nfn_addressbook\u002Fnfnaddressbook.php.",9.3,0.07763,{"cveId":286,"description":287,"publishedDate":221,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":288},"CVE-2007-2005","Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) contact_type.php, (2) itemstatus_type.php, (3) projectstatus_type.php, (4) request_type.php, (5) responses_type.php, (6) timelog_type.php, or (7) urgency_type.php in inc\u002F.",0.06681,{"cveId":290,"description":291,"publishedDate":53,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":292},"CVE-2006-3980","PHP remote file inclusion vulnerability in administrator\u002Fcomponents\u002Fcom_mgm\u002Fhelp.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.",0.06249,{"cveId":294,"description":295,"publishedDate":214,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":296},"CVE-2006-3773","PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and Mambo 4.5.3+ allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.",0.05901,{"cveId":298,"description":299,"publishedDate":229,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":300},"CVE-2006-4288","PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.  NOTE: some of these details are obtained from third party information.",0.05814,{"cveId":302,"description":303,"publishedDate":304,"cvssScore":305,"cvssVersion":265,"severity":306,"isKev":267,"epssScore":307},"CVE-2006-1794","SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes\u002Fmambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).","2006-04-17",7.6,"High",0.05657,{"cveId":309,"description":310,"publishedDate":61,"cvssScore":264,"cvssVersion":265,"severity":266,"isKev":267,"epssScore":311},"CVE-2006-4553","PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.",0.04993,[],[314,315,316,317,318,319,320,321,322,323],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":30,"cve_count":36,"kev_count":11,"last_cve_update":41},{"id":43,"product_name":44,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":45},{"id":47,"product_name":48,"version_count":36,"cve_count":36,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":53},{"id":55,"product_name":56,"version_count":11,"cve_count":36,"kev_count":11,"last_cve_update":57},{"id":59,"product_name":60,"version_count":35,"cve_count":35,"kev_count":11,"last_cve_update":61},{"title":325,"metaDescription":326,"keywords":327,"structuredData":328},"Mambo - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mambo covering 65 products with 123 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mambo vulnerabilities, Mambo security, Mambo CVE, Mambo threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":329,"@type":330,"name":331,"description":326,"url":332},"https:\u002F\u002Fschema.org","Organization","Mambo","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmambo",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":334,"apiVersion":335},"2026-10-17T22:51:31.816Z","3.0"]