Mambo versions 4.5 and below are susceptible to cross site scripting and remote command execution flaws.