CVE-2006-1956: Medium severity Mambo Mambo vulnerability
Published Apr 21, 2006
·Updated
The comrss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message.
Affected Software
2 affected components
Mambo Mambo=4.5.3h-h
Joomla joomla=1.0.7
Event History
Apr 21, 2006
CVE Published
10:02 AM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1956?
CVE-2006-1956 is classified as a medium severity vulnerability.
2
How do I fix CVE-2006-1956?
To mitigate CVE-2006-1956, update to the latest versions of Joomla! or Mambo that contain security patches.
3
What is the impact of CVE-2006-1956 on my system?
CVE-2006-1956 allows remote attackers to exploit the vulnerability to disclose sensitive information through error messages.
4
Which software versions are affected by CVE-2006-1956?
CVE-2006-1956 affects Mambo version 4.5.3h-h and Joomla! version 1.0.7.
5
Are there any known exploits for CVE-2006-1956?
Yes, CVE-2006-1956 can be exploited by remotely manipulating the feed parameter in the RSS module.