CVE-2011-2917: SQL Injection
Published Dec 8, 2011
·Updated
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter.
Affected Software
10 affected components
Mambo-foundation Mambo=4.6
Mambo-foundation Mambo=4.6.2-pre2
Mambo-foundation Mambo=4.6.2
Mambo-foundation Mambo=4.6-rc1
Mambo-foundation Mambo=4.6.2-pre1
Mambo-foundation Mambo=4.6.1
Mambo-foundation Mambo=4.6.4
Mambo-foundation Mambo<=4.6.5
Mambo-foundation Mambo=4.6-rc2
Mambo-foundation Mambo=4.6.3
Event History
Dec 8, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2917?
CVE-2011-2917 has been classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2011-2917?
To fix CVE-2011-2917, you should upgrade Mambo CMS to version 4.6.6 or later, which includes patches for this vulnerability.
3
Which versions of Mambo CMS are affected by CVE-2011-2917?
CVE-2011-2917 affects Mambo CMS versions 4.6.5 and earlier.
4
What type of vulnerability is CVE-2011-2917?
CVE-2011-2917 is classified as an SQL injection vulnerability.
5
Can CVE-2011-2917 be exploited remotely?
Yes, CVE-2011-2917 can be exploited remotely by attackers, enabling them to execute unauthorized SQL commands.