CVE-2005-4156 Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query s...
HighCVSS 9.4
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mambo open source 4.5 | = 1.0.0 | No fix listed |
| mambo open source 4.5 | = 1.0.1 | No fix listed |
| mambo open source 4.5 | = 1.0.2 | No fix listed |
| mambo open source 4.5 | = 1.0.3 | No fix listed |
| mambo open source 4.5 | = 1.0.3_beta | No fix listed |
| mambo open source 4.5 | = 1.0.9 | No fix listed |
References
- 1015176 vdb-entry
- www.procheckup.com