high7.5
CVE-2006-7150
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php a…
Impact
Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mambo | Mambo Open Source | Versions 4.6, 4.6.1 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2379
- http://www.kapda.ir/advisory-444.html
- http://www.securityfocus.com/archive/1/449305/100/0/threaded
- http://www.securityfocus.com/bid/20650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29707
- http://securityreason.com/securityalert/2379
- http://www.kapda.ir/advisory-444.html
- http://www.securityfocus.com/archive/1/449305/100/0/threaded
- http://www.securityfocus.com/bid/20650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29707