CVE-2005-3738: Low severity Mambo Mambo Site Server vulnerability
globals.php in Mambo Site Server 4.0.14 and earlier, when registerglobals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfigabsolutepath parameter to content.html.php for remote PHP file inclusion.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3738?
CVE-2005-3738 is classified as a critical vulnerability due to its potential for remote code execution.
Which versions of Mambo Site Server are affected by CVE-2005-3738?
CVE-2005-3738 affects Mambo Site Server versions 4.0.10 through 4.0.14, including all related release candidates and betas.
How do I fix CVE-2005-3738?
To fix CVE-2005-3738, you should upgrade Mambo Site Server to version 4.0.15 or later.
What kind of attacks can be conducted due to CVE-2005-3738?
CVE-2005-3738 allows attackers to overwrite variables in the GLOBALS array, enabling remote PHP file inclusion attacks.
What is the impact of exploiting CVE-2005-3738?
Exploiting CVE-2005-3738 could lead to unauthorized remote code execution on the affected server.