CVE-2006-4269

Published 21 Aug 2006 · Updated 07 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%

PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package

Affected products

n/a · n/a

References

http://archives.neohapsis.com/archives/bugtraq/2006-08/0427.html https://exchange.xforce.ibmcloud.com/vulnerabilities/28451 http://www.osvdb.org/28095 http://www.securityfocus.com/archive/1/443625/100/0/threaded http://www.securityfocus.com/bid/19588