FreeBSD Ports: mambo

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2006-7150

CVE-2006-7150 affects Mambo 4.6.x with multiple SQL injection vulnerabilities. The issues allow remote attackers to inject arbitrary SQL via the mcname parameter to moscomment.php and com_comment.php, enabling potentially unauthorized data access or modification. The vulnerability is documented w...