KAPDA Advisory #60 – Mambo V4.6.x vulnerabilities including cross site scripting and html/sql injection.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51276/kapda-60.txt
Source: https://packetstormsecurity.com/files/51276/kapda-60.txt.html