CVE-2004-1826: SQL Injection
Published Mar 16, 2004
·Updated
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
5 affected components
Mambo Mambo Open Source 4.5=1.0.0
Mambo Mambo Open Source 4.5=1.0.1
Mambo Mambo Open Source 4.5=1.0.2
Mambo Mambo Open Source 4.5=1.0.3
Mambo Mambo Open Source 4.5=1.0.3beta
Remediation
Patch Available
Patch Available
Event History
Mar 16, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1826?
CVE-2004-1826 is considered a critical severity vulnerability due to the potential for remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2004-1826?
To fix CVE-2004-1826, upgrade Mambo Open Source to version 4.5 stable 1.0.4 or later.
3
Which versions of Mambo are affected by CVE-2004-1826?
CVE-2004-1826 affects Mambo Open Source versions 1.0.0 through 1.0.3 and beta versions.
4
Can CVE-2004-1826 lead to data compromise?
Yes, CVE-2004-1826 can lead to data compromise as it allows attackers to manipulate databases through SQL injection.
5
Is there a workaround for CVE-2004-1826?
There are no reliable workarounds for CVE-2004-1826; the best solution is to apply the software update.