CVE-2006-3773

EPSS 5.8%

PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and Mambo 4.5.3+ allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2021unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://forum.mamboserver.com/showthread.php?t=83001 http://secunia.com/advisories/21079 https://exchange.xforce.ibmcloud.com/vulnerabilities/27777 https://www.exploit-db.com/exploits/2021 http://www.securityfocus.com/bid/18924 http://www.vupen.com/english/advisories/2006/2846