CVE-2006-4288

Affected software: Mambo CMS, com_a6mambocredits (a6mambocredits) component, versions 2.0.0 and earlier. Vulnerability: PHP remote file inclusion in admin.a6mambocredits.php that allows an attacker to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Impact (as stated): r...