Mambo Prior to 4.6.4 Multiple Input Validation Vulnerabilities

Mambo is prone to an SQL-injection vulnerability and an HTTP-response-splitting issue because the application fails to properly sanitize user-supplied input.

An attacker could exploit these vulnerabilities to access or modify data, exploit latent vulnerabilities in the underlying database, or coax victims into a false sense of security so they may divulge sensitive information.

Versions prior to Mambo 4.6.4 are vulnerable.


 

Privacy Statement
Copyright 2010, SecurityFocus