Vulnerability Report

CVE-2007-4203

Title: Mambo Mambo Open Source Auth Bypass

Auth Bypass

Proof Of Concept

No public PoC currently indexed for CVE-2007-4203.

CWE Category CWE-287

Published Date Aug 08, 2007

Modified Date Apr 09, 2025

Exploit Status Not Found

Score 9.3 CVSS v2.0

Exploit Probability (EPSS)

0.86%

CVE-2007-4203: Session fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions by setting the Cookie parameter.

http://osvdb.org/42514 http://securityreason.com/securityalert/2970 http://www.securityfocus.com/archive/1/475241/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/35744 http://osvdb.org/42514 http://securityreason.com/securityalert/2970 http://www.securityfocus.com/archive/1/475241/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/35744

CVSS v2.0

Source Entity [email protected]

Severity HIGH

9.3

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:C/I:C/A:C

Total: Patterns

No public PoCs found in our database for this CVE.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

August 08, 2007 PUBLISHED

Vulnerability first announced in NVD.

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:C/I:C/A:C

No specific products linked.