CVE-2006-7150

Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.

Published: Mar 7, 2007
Updated: Apr 13, 2023
CVE: CVE-2006-7150
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mambo / mambo_open_source	4.6	4.6.x
mambo / mambo_open_source	4.6.1	4.6.1.x
mambo / mambo_open_source	4.6-rc1	4.6-rc1.x
mambo / mambo_open_source	4.6-rc2	4.6-rc2.x

http://securityreason.com/securityalert/2379
http://www.kapda.ir/advisory-444.html
http://www.securityfocus.com/archive/1/449305/100/0/threaded
http://www.securityfocus.com/bid/20650
https://exchange.xforce.ibmcloud.com/vulnerabilities/29707

Vulnerability Database

CVE-2006-7150