← Database

CVE-2006-7150

HIGH CVSS: 7.5 Published: 2007-03-07 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.

Affected Platforms

Mambo Mambo Open Source

Weakness Type

NVD-CWE-Other

References