Lucene search
HistoryAug 05, 2006 - 12:04 a.m.
CVE-2006-3980
cve-2006-3980
mambo gallery manager
mgm
remote file inclusion
php
security vulnerability
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.09 Low
EPSS
Percentile
94.7%
PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected configurations
Node
mambomambo_gallery_managerRange≤0.95r2
| CPE | Name | Operator | Version |
|---|---|---|---|
| mambo:mambo_gallery_manager | mambo mambo gallery manager | le | 0.95r2 |
References
Related
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2006-3980
2006-08-05 00:04:00
cvelist
cvelist
CVE-2006-3980
2006-08-05 00:00:00
nessus
nessus
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.09 Low
EPSS
Percentile
94.7%
Related for CVE-2006-3980