CVE-2008-7214

no score yetEPSS 0.7%

No CVSS score yet. EPSS 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2009-09-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

brilaps:mostlyce
mambo-foundation:mambo

References

http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html
http://forum.mambo-foundation.org/showthread.php?t=10158
http://osvdb.org/42531
http://secunia.com/advisories/28670
http://www.bugreport.ir/index_33.htm

Check your stack JSON