CVE-2006-7149: XSS
First published: Wed Mar 07 2007(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the query string to (a) index.php, which reflects the string in an error message from mod_login.php; and the (2) mcname parameter to (b) moscomment.php and (c) com_comment.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mambo (MamboCMS) | =4.6-rc1 | |
| Mambo (MamboCMS) | =4.6.1 | |
| Mambo (MamboCMS) | =4.6-rc2 | |
| Mambo | =4.6-rc1 | |
| Mambo | =4.6-rc2 | |
| Mambo | =4.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the vulnerabilities associated with CVE-2006-7149?
CVE-2006-7149 is related to multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x that allow remote attackers to inject arbitrary web script or HTML.
What versions of Mambo are affected by CVE-2006-7149?
The affected versions are Mambo 4.6-rc1, 4.6-rc2, and 4.6.1.
What is the impact of CVE-2006-7149 on web applications?
Web applications using Mambo 4.6.x are vulnerable to XSS attacks, potentially allowing attackers to execute malicious scripts in users' browsers.
How can I protect my application from CVE-2006-7149?
To protect your application, you should upgrade to a fixed version of Mambo that addresses the XSS vulnerabilities.
What kind of attack can be executed through CVE-2006-7149?
Attackers can execute XSS attacks that may lead to session hijacking, phishing, or other malicious activities affecting users.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- vendor/mambo
- canonical/mambo (mambocms)
- version/mambo (mambocms)/4.6-rc1
- version/mambo (mambocms)/4.6.1
- version/mambo (mambocms)/4.6-rc2
- canonical/mambo
- version/mambo/4.6-rc1
- version/mambo/4.6-rc2
- version/mambo/4.6.1