Unrated severityNVD Advisory· Published Dec 8, 2011· Updated Jun 16, 2026
CVE-2011-2917
CVE-2011-2917
Description
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mambo-foundation:mambo:*:*:*:*:*:*:*:*range: <=4.6.5
- cpe:2.3:a:mambo-foundation:mambo:4.6:*:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6.2:pre1:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6.2:pre2:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6:rc1:*:*:*:*:*:*
- cpe:2.3:a:mambo-foundation:mambo:4.6:rc2:*:*:*:*:*:*
- Range: <=4.6.5
Patches
Vulnerability mechanics
References
5- www.exploit-db.com/exploits/18110nvdExploit
- www.openwall.com/lists/oss-security/2011/08/12/6nvdExploit
- www.osvdb.org/74502nvdExploit
- www.securityfocus.com/bid/49130nvdExploit
- yehg.net/lab/pr0js/advisories/%5Bmambo4.6_x%5D_sql_injectionnvdExploit
News mentions
0No linked articles in our index yet.