CVE-2005-3586

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-16 · updated 2026-06-16

Description

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error.

Affected products

Mambo: 4.5.2, 4.5.2.1, 4.5.2.2, 4.5.2.3

References

http://irannetjob.com/content/view/153/28/
http://marc.info/?l=bugtraq&m=113106195532404&w=2
http://irannetjob.com/content/view/153/28/
http://marc.info/?l=bugtraq&m=113106195532404&w=2

Get alerted when CVE-2005-3586 or the next vulnerability affects your stack