VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 19, 2008· Updated Jun 16, 2026

CVE-2008-3712

CVE-2008-3712

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php and the (2) mosConfig_sitename parameter to administrator/popups/index3pop.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mambo (software)/Mambo3 versions
    cpe:2.3:a:mambo:mambo:4.6.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mambo:mambo:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo:4.6.5:*:*:*:*:*:*:*
    • (no CPE)range: 4.6.2, 4.6.5

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.