Forum Russian Board 4.2 Full remote command execution exploit which takes advantage of a bug in style_edit.php. Tested against Unix and Windows.
032fd083c18f92a236f737bdd568e439acf4c6bda23eb4f63ea6e25f8b9669ed
Mambo <= 4.5.2.1, MySQL => 4.1 exploit which injects SQL into the rating_count variable.
fa5ee19dde2b5912221be2377dfdb16c7f360b449b2bbeea4d5de82f902e5a57