CVE-2008-5226

no score yetEPSS 1.0%

SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote attackers to execute arbitrary SQL commands via the ma_cat parameter in a view action to index.php, a different vector than CVE-2007-5177.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2008-11-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mambads:mambads
mambo:mambo

References

http://securityreason.com/securityalert/4630
http://www.securityfocus.com/bid/29433
https://exchange.xforce.ibmcloud.com/vulnerabilities/42747
https://www.exploit-db.com/exploits/5692
http://securityreason.com/securityalert/4630

Check your stack JSON