CVE-2007-4505

The CVE-2007-4505 entry describes a SQL injection in Mambo’s RemoSitory component (com_remository) within index.php, exploitable via the cat parameter in a selectcat action to execute arbitrary SQL. Affected software is Mambo with the RemoSitory component; the root cause is unsanitized/crafted in...