CVE-2006-4229

PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component comlm before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4229

The vulnerability CVE-2006-4229 affects the mosListMessenger (com_lm) component used by Mambo and Joomla!. It is a PHP remote file inclusion in archive.php that allows an attacker to execute arbitrary PHP code via a URL specified in the mosConfig_absolute_path parameter. The issue is dated to bef...

CVE-2005-4229

The CVE-2005-4229 entry concerns EveryAuction before or at version 1.53, focusing on the auction.pl component. The vulnerability is an XSS flaw that allows a remote attacker to inject arbitrary web script or HTML through the searchstring parameter. The description notes that the provenance is unk...