CVE-2006-4282 PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a...
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mamboxchange mambowiki | = 0.9.4 | No fix listed |
| mamboxchange mambowiki | = 0.9.6 | No fix listed |
References
- 1436 third-party-advisory
- www.lyquidity.com
- 20060818 Joomla MamboWiki Component <= 0.9.4 (MamboLogin.php) Remote File Inclusion Vulnerability mailing-list
- 19594 exploit vdb-entry
- mambowiki-mambologin-file-include(28463) vdb-entry
- 2213 exploit