First published: Tue Dec 31 2002(Updated: )
Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mambo Site Server | =4.0.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2290 has a high severity level due to the ease of remote exploitation of default credentials.
To fix CVE-2002-2290, change the default username and password for the admin account immediately after installation.
CVE-2002-2290 specifically affects Mambo Site Server version 4.0.11.
Yes, CVE-2002-2290 can be exploited remotely due to the presence of default admin credentials.
The potential risks include unauthorized access and control over the Mambo Site Server, leading to data breaches or service disruptions.