Mambo Login SQL Injection Vulnerability

Bugtraq ID:	20366
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 05 2006 12:00AM
Updated:	Mar 19 2015 08:50AM
Credit:	James Bercegay is credited with the discovery of this vulnerability.
Vulnerable:	Mambo Mambo Open Source 4.6 CVS Mambo Mambo Open Source 4.6 Mambo Mambo Open Source 4.5.4 Mambo Mambo Open Source 4.5.3 Mambo Mambo Open Source 4.5.2 .3 Mambo Mambo Open Source 4.5.2 .2 Mambo Mambo Open Source 4.5.2 .1 Mambo Mambo Open Source 4.5.2 Mambo Mambo Open Source 4.5.1 (1.0.9) Mambo Mambo Open Source 4.5.1 Beta 2 Mambo Mambo Open Source 4.5.1 Beta Mambo Mambo Open Source 4.5.1 Mambo Mambo Open Source 4.5 (1.0.3beta) Mambo Mambo Open Source 4.5 (1.0.3) Mambo Mambo Open Source 4.5 (1.0.2) Mambo Mambo Open Source 4.5 (1.0.1) Mambo Mambo Open Source 4.5 (1.0.0) Mambo Mambo Open Source 4.0.14 Mambo Mambo Open Source 4.6.0 rc2 Mambo Mambo Open Source 4.6.0 rc1 Mambo Mambo Open Source 4.5.3h
Not Vulnerable:	Mambo Mambo Open Source 4.6.1 Mambo Mambo Open Source 4.5.4 SP3

Mambo Login SQL Injection Vulnerability

Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. Other attacks are also possible.

Mambo Login SQL Injection Vulnerability

An attacker can exploit this issue via a web client.

Mambo Login SQL Injection Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.

Mambo Login SQL Injection Vulnerability

References:

• Mambo Homepage (Mambo)