CVE-2006-7202: Mambo Open Source

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors.

Affected products

• Mambo Mambo Open Source: version 4.6.1 only

Published 2007-05-09. Last modified 2026-06-16.