CVE-2004-1826

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.23% chance of exploitation in the next 30 days, 68th percentile

Published

2005-05-10

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23834

Security advisories

• http://secunia.com/advisories/11140
• http://www.osvdb.org/4307
• http://www.securityfocus.com/bid/9891

References

• CVE Record
• NVD entry