CVE-2004-2072 Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.
MediumCVSS 6.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mambo open source | = 4.6 | No fix listed |
References
- 9588 exploit vdb-entry
- www.systemsecure.org exploit
- mambo-itemid-xss(15062) vdb-entry