CVE-2006-7092

SQL injection vulnerability in includes/mambo.php in Mambo LaiThai 4.5.4 SP2 and earlier allows remote attackers to execute arbitrary SQL commands via the usercookie[password] cookie parameter.

🔗 References (8)

• cve@mitrehttp://mamboxchange.com/forum/forum.php?forum_id=7767
• cve@mitrehttp://secunia.com/advisories/22263
• cve@mitrehttp://www.securityfocus.com/bid/20413
• cve@mitrehttp://www.vupen.com/english/advisories/2006/3953
• af854a3a-2127-422b-91ae-364da2661108http://mamboxchange.com/forum/forum.php?forum_id=7767
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22263
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/20413
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3953