CVE-2006-4859

Limbo CMS (Lite Mambo) — affected: Limbo/Lite Mambo com_contact in versions up to 1.0.4.2L. The contact.html.php file’s contact_attach parameter allows unrestricted file uploads using a filename with a double extension, bypassing a restrictive regex. This enables remote attackers to upload PHP co...

CVE-2023-4859

CVE-2023-4859 is rejected; do not use this candidate number, reference CVE-2024-27957 instead.

CVE-2023-4859

...