Security Advisory
CVE-2013-2562
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors.