CVE-2005-3586: Mambo

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

content.php in Mambo 4.5.2 through 4.5.2.3 allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error.

Affected products

• Mambo Mambo: version 4.5.2 only; version 4.5.2.1 only; version 4.5.2.2 only; version 4.5.2.3 only

Published 2005-11-16. Last modified 2026-06-16.