Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-2002. PoCs published by pokleyzz.
AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in Mambo CMS 4.5.2.1 by manipulating the `user_rating` parameter to extract password hashes from the `mos_users` table using blind SQL injection techniques.
Description
SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by pokleyzz · phpwebappsphp
https://www.exploit-db.com/exploits/1049
This exploit leverages a SQL injection vulnerability in Mambo CMS 4.5.2.1 by manipulating the `user_rating` parameter to extract password hashes from the `mos_users` table using blind SQL injection techniques.
Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target:
Mambo CMS 4.5.2.1 with MySQL 4.1+
No auth needed
Prerequisites:
PHP 4.x with cURL extension · MySQL 4.1+ · Access to a CGI proxy for IP spoofing
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (6)
Core 6
Core References
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/15710
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/13966
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014222
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/17323
Vendor Advisory x_refsource_confirm
http://mamboforge.net/frs/download.php/6153/CHANGELOG
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111885974124936&w=2
Scores
EPSS
0.0132
EPSS Percentile
67.2%
Details
Status
published
Products (6)
mambo/mambo
4.5.0.2
mambo/mambo
4.5.1.3
mambo/mambo
4.5.1a a
mambo/mambo
4.5.2
mambo/mambo
4.5.2.2
mambo/mambo
4.5_1.0.9
Published
Jun 15, 2005
Tracked Since
Feb 18, 2026