CVE-2013-2562

Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2014-06-09

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Mambo Cms (Mambo-foundation)

References

• http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt
• http://seclists.org/oss-sec/2013/q1/689
• http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html