CVE-2013-2562

EUVD-2013-2504
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Affected Products (NVD)
VendorProductVersion
mambo-foundationmambo_cms
4.6.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt
http://seclists.org/oss-sec/2013/q1/689
http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html
http://packetstormsecurity.com/files/108462/mambocms465-permdosdisclose.txt
http://seclists.org/oss-sec/2013/q1/689
http://www.vapid.dhs.org/advisories/mambo_cms_4.6.5.html