CVE-2006-3748 PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitra...
MediumCVSS 6.8
EPSS 5.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mamboxchange loudmouth | = 4.0j | No fix listed |
References
- 21077 third-party-advisory vendor-advisory
- 19044 exploit vdb-entry
- ADV-2006-2844 vdb-entry
- loudmouth-class-file-include(27772) vdb-entry
- 2023 exploit