4.6.4

DATE	CVE	VULNERABILITY TITLE	RISK
2011-12-08	CVE-2011-2917	SQL Injection vulnerability in Mambo-Foundation Mambo SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter. network low complexity mambo-foundation CWE-89	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.