CVE-2006-7150: Mambo Open Source

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.

Affected products

• Mambo Mambo Open Source: version 4.6 only; version 4.6.1 only

Published 2007-03-07. Last modified 2026-06-16.