← Database

CVE-2007-0789

MEDIUM CVSS: 6.8 Published: 2007-02-06 Modified: 2026-06-16

Description

SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter.

Affected Platforms

Mambo Mambo

Weakness Type

CWE-89

References