Vulnerabilities > Mambads

DATE CVE VULNERABILITY TITLE RISK
2008-11-25 CVE-2008-5226 SQL Injection vulnerability in multiple products
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5177.
network
low complexity
mambads joomla mambo CWE-89
7.5
2007-10-03 CVE-2007-5177 SQL Injection vulnerability in multiple products
SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter.
network
low complexity
mambads mambo CWE-89
7.5