$ 0 0 Mambo version 4.6.5 suffers from a cross site request forgery vulnerability that allows for remote SQL injection.