CVE-2004-1693: High severity Mambo Mambo vulnerability
Published Sep 18, 2004
·Updated
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code.
Affected Software
1 affected component
Mambo Mambo=4.5_1.0.9
Remediation
Patch Available
Event History
Sep 18, 2004
CVE Published
04:00 AM
Feb 20, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1693?
CVE-2004-1693 has a high severity rating due to the potential for arbitrary PHP code execution.
2
How do I fix CVE-2004-1693?
To fix CVE-2004-1693, upgrade Mambo to a version that is not vulnerable to remote file inclusion vulnerabilities.
3
What software is affected by CVE-2004-1693?
CVE-2004-1693 specifically affects Mambo version 4.5 (1.0.9).
4
Can CVE-2004-1693 be exploited remotely?
Yes, CVE-2004-1693 can be exploited remotely if an attacker can manipulate the mosConfig_absolute_path parameter.
5
Is CVE-2004-1693 still a risk today?
Although CVE-2004-1693 is an older vulnerability, it could still present a risk if outdated Mambo versions are in use.