CVE:CVE-2006-7150
CNNVD:CNNVD-200703-264
Mambo 4.6.x中存在多个SQL注入漏洞。远程攻击者可以借助提交到(1)moscomment.php和(2)com_comment.php的mcname参数，执行任意的SQL指令。
solution:Upgrade mambo mambo_open_source to a higher version than 4.6,4.6:rc1,4.6:rc2,4.6.1,and avoid the version 4.6,4.6:rc1,4.6:rc2,4.6.1