Lucene search
HistoryMar 03, 2007 - 9:19 p.m.
CVE-2006-7104
cve-2006-7104
php
remote file inclusion
vulnerability
htmltemplate.php
mostlycontent editor
mostlyce
mambo 4.5.4
nvd
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.6%
PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created on May 2006, a component for Mambo 4.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected configurations
Node
mambomostlyceMatch4.5.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| mambo:mostlyce | mambo mostlyce | eq | 4.5.4 |
7.9 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.016 Low
EPSS
Percentile
87.6%
Related for CVE-2006-7104