← Vulnerability feed

Vulnerability record · CVE-2006-1794 · published 17 April 2006

CVE-2006-1794: Mambo vulnerability

Mambo · Mambo

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).

7.6 CVSS 2.0 High EPSS 5.5% · top 7.5%
7.6CVSS 2.0 base score
5.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References, 6 tagged exploit
16 Jun 2026Last modified by NVD

Description

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).

AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html ExploitPatchVendor Advisory
http://secunia.com/advisories/18935 Vendor Advisory
http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/ Patch
http://www.gulftech.org/?node=research&article_id=00104-02242006 ExploitPatch
http://www.osvdb.org/23402
http://www.osvdb.org/23503
http://www.securityfocus.com/bid/16775 ExploitPatch
http://www.vupen.com/english/advisories/2006/0719
https://exchange.xforce.ibmcloud.com/vulnerabilities/24951
http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html ExploitPatchVendor Advisory
http://secunia.com/advisories/18935 Vendor Advisory
http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/ Patch
http://www.gulftech.org/?node=research&article_id=00104-02242006 ExploitPatch
http://www.osvdb.org/23402
http://www.osvdb.org/23503
http://www.securityfocus.com/bid/16775 ExploitPatch
http://www.vupen.com/english/advisories/2006/0719
https://exchange.xforce.ibmcloud.com/vulnerabilities/24951

Track CVE-2006-1794 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2008-5226Mambads sql injection vulnerabilitySQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQ…EPSS 1.0%7.5CVE-2008-0829Joomla sql injection vulnerabilitySQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo allows remote attackers to ex…EPSS 1.1%7.5CVE-2008-0795Joomla sql injection vulnerabilitySQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute arbitrary…EPSS 0.97%7.5CVE-2008-0561Arthur konze webdesign akogallery sql injection vulnerabilitySQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com_akogallery) 2.5 beta component for Mambo and Joomla! allows remote attac…EPSS 1.1%7.5CVE-2008-0510Joomla com newsletter sql injection vulnerabilitySQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows remote attackers to execute ar…EPSS 0.97%7.5CVE-2008-0517Darko selesi estateagent sql injection vulnerabilitySQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.x and Joomla! allows remote at…EPSS 1.0%7.5CVE-2007-5177Mambads sql injection vulnerabilitySQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrar…EPSS 0.99%7.5CVE-2007-4456Mambo sql injection vulnerabilitySQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitrary SQL c…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2006-1794), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.