CVE-2007-4203: Mambo Open Source

High severity, CVSS 9.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.

Affected products

• Mambo Mambo Open Source: version 4.6.2 only

Published 2007-08-08. Last modified 2026-06-16.