Mambo versions 4.5.3h and below are susceptible to SQL injection and file inclusion attacks. Full details provided.