← All advisories

Unrated severityNVD Advisory· Published Jun 9, 2014· Updated Jun 16, 2026

CVE-2013-2563

CVE-2013-2563

Description

Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Mambo (software)/CMS2 versions
cpe:2.3:a:mambo-foundation:mambo_cms:4.6.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mambo-foundation:mambo_cms:4.6.5:*:*:*:*:*:*:*
- (no CPE)range: =4.6.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.