Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026

CVE-2004-2072

Description

Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.

Affected products

Mambo (software)/Mambo Open Source
cpe:2.3:a:mambo:mambo_open_source:4.6:*:cvs:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/9588nvdExploit
www.systemsecure.org/advisories/ssadvisory06022004.phpnvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/15062nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000