CVE-2011-2917

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

CMS 4.x.x Zorder (SQL Injection Vul)

No description provided by source. + Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : -...

PT-2011-4185

Name of the Vulnerable Software and Affected Versions Mambo CMS versions 4.6.5 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the zorder parameter in the administrator/index2.php file. Recommendations For Mambo CMS versions 4.6.5...

CVE-2011-2917: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

Mambo CMS 4.6.5 SQL Injection

Mambo CMS 4.6.x 4.6.5 | SQL Injection 1. OVERVIEW Mambo CMS 4.6.5 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND Mambo is a full-featured, award-winning content management system that can be used for everything from simple websites to complex corporate applications. It is used...