Description
SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cancel edit functions, possibly related to the id parameter.
References
- 33088 vdb-entry
- 24044 third-party-advisory
- http://mamboxchange.com/frs/shownotes.php?release_id=6232
- ADV-2007-0480 vdb-entry