VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 7, 2007· Updated Jun 16, 2026

CVE-2006-7150

CVE-2006-7150

Description

Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mambo (software)/Mambo Open Source4 versions
    cpe:2.3:a:mambo:mambo_open_source:4.6.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:mambo:mambo_open_source:4.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_open_source:4.6:*:cvs:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_open_source:4.6:rc1:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_open_source:4.6:rc2:*:*:*:*:*:*
  • Mambo (software)/Mambollm-fuzzy
    Range: 4.6.x

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.