CVE:CVE-2006-7092
CNNVD:CNNVD-200703-034
Mambo LaiThai 4.5.4 SP2及之前版本的includes/mambo.php中存在SQL注入漏洞。远程攻击者可以借助usercookie[password] cookie参数，执行任意的SQL指令。
solution:Upgrade mamboxchange laithai to a higher version than *:sp2,and avoid the version *:sp2