CVE-2006-4553

2006-09-0600:00:00

mitre

www.cve.org

AI Score

7.6

Confidence

Low

EPSS

0.043

Percentile

92.4%

JSON

PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

References

secunia.com/advisories/21636

securityreason.com/securityalert/1491

www.securityfocus.com/archive/1/444425/100/0/threaded

www.securityfocus.com/bid/19725

exchange.xforce.ibmcloud.com/vulnerabilities/28596