CVE-2005-2002

SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter.

Date published : 2005-06-20

http://www.securityfocus.com/bid/13966

http://marc.info/?l=bugtraq&m=111885974124936&w=2