Back

CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
mambo mambo_portal *

GitHub Security Advisory GHSA-j8vr-q3f2-8pqh

SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09)...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.75%

Top 24% most likely to be exploited

Threat Score 30.5 / 100

Data Sources

NVD EPSS GitHub