CVE-2011-2917

SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter...

PT-2011-4185

Name of the Vulnerable Software and Affected Versions Mambo CMS versions 4.6.5 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the zorder parameter in the administrator/index2.php file. Recommendations For Mambo CMS versions 4.6.5...

Mambo CMS 4.6.5 SQL Injection

Mambo CMS 4.6.x 4.6.5 | SQL Injection 1. OVERVIEW Mambo CMS 4.6.5 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND Mambo is a full-featured, award-winning content management system that can be used for everything from simple websites to complex corporate applications. It is used...