SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
http://www.vupen.com/english/advisories/2006/2416
http://www.securityfocus.com/bid/18492
http://www.securityfocus.com/archive/1/437496/100/100/threaded
http://www.mamboserver.com/?option=com_content&task=view&id=207
http://securitytracker.com/id?1016334