CVE-2006-4288

Affected software: Mambo CMS, com_a6mambocredits (a6mambocredits) component, versions 2.0.0 and earlier. Vulnerability: PHP remote file inclusion in admin.a6mambocredits.php that allows an attacker to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Impact (as stated): r...

CVE-2006-4288: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component coma6mambocredits 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter. NOTE: some of these details are obtained from third...

Mambo Component 'com_a6mambocredits' 1.0.0 - Remote File Inclusion

Title : Mambo a6mambocredits component v1.0.0 == mosConfiglivesite Remote File Include Vulnerabilities Affected Application: Mambo a6mambocredits component v1.0.0 Mambo CMS Component . . : contact : . . . . . . . . . . . . . . . . . . . . . . . . . . . Discoverd/Found by: Charles Nelwan a.k.a...