ID CVE-2002-2290
Summary Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.
References
Vulnerable Configurations
  • cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 29-07-2017 - 01:29)
Impact:
Exploitability:
CWE CWE-255
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bugtraq 20021212 Multiple Mambo Site Server sec-weaknesses
xf mambo-default-admin-password(10857)
Last major update 29-07-2017 - 01:29
Published 31-12-2002 - 05:00
Last modified 29-07-2017 - 01:29
Back to Top