CVE-2006-4288

EPSS 5.7%

PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2207unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/21540 http://securitytracker.com/id?1016716 https://exchange.xforce.ibmcloud.com/vulnerabilities/28443 https://www.exploit-db.com/exploits/2207 http://www.osvdb.org/27991 http://www.securityfocus.com/bid/19581 http://www.vupen.com/english/advisories/2006/3311