CVE-2008-2498

CVE-2008-2498 involves multiple SQL injection vulnerabilities in Mambo before 4.6.4. The flaws allow remote attackers to execute arbitrary SQL commands via the articleid and mcname parameters in index.php when magic_quotes_gpc is disabled. The issue is documented across multiple sources (NVD/NVD-...