CVE-2006-5048

EPSS 9.5%

Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter in (1) configinsert.php, (2) lang.php, (3) client.php, and (4) server.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2083unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://forum.joomla.org/index.php/topic%2C79477.0.html http://forum.joomla.org/index.php/topic%2C81589.0.html http://secunia.com/advisories/21260 https://exchange.xforce.ibmcloud.com/vulnerabilities/28078 https://www.exploit-db.com/exploits/2083 http://www.osvdb.org/27655 http://www.osvdb.org/27656 http://www.osvdb.org/27657 http://www.osvdb.org/27658 http://www.securityfocus.com/bid/19217 http://www.vupen.com/english/advisories/2006/3062