CVE-2008-7212: Brilaps Mostlyce

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in an error message.

Affected products

• Brilaps Mostlyce: up to and including 2.0
• Mambo-Foundation Mambo: up to and including 4.6.3; version 4.6.2 only

Published 2009-09-11. Last modified 2026-06-16.