CVE-2006-4296

EPSS 3.4%

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2225unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/21574 https://exchange.xforce.ibmcloud.com/vulnerabilities/28468 https://www.exploit-db.com/exploits/2225 http://www.osvdb.org/28032 http://www.securityfocus.com/bid/19616 http://www.vupen.com/english/advisories/2006/3340