CVE-2006-7092

CVE-2006-7092 describes an SQL injection in Mambo LaiThai software (versions 4.5.4 SP2 and earlier) via the usercookie[password] cookie parameter in includes/mambo.php. Remote attackers could execute arbitrary SQL commands. The CVSS metrics indicate a network-accessible high-severity issue with l...