CVE-2006-4375

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD ContXTD component for Mambo comcontxtd allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: another researcher has disputed this issue, saying that the softwar...

CVE-2006-4375

The CVE concerns Mambo’s Contacts XTD component (com_contxtd) with a PHP remote file inclusion in contxtd.class.php. The vulnerability allows an attacker to supply a URL via mosConfig_absolute_path to execute arbitrary PHP code on the server. A mitigating note in the records states the attack may...