Mambo versions 4.5.2.3, 4.5.2.2, 4.5.2.1, 4.5.2 suffer from a path disclosure vulnerability via a specially crafted url.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41252/mambo-4.5.2.3.txt
Source: https://packetstormsecurity.com/files/41252/mambo-4.5.2.3.txt.html