CVE-2006-3970

CVE-2006-3970 concerns a PHP remote file inclusion in the LMO Component (com_lmo) for Joomla! up to version 1.0b2. The flaw allows an attacker to cause remote PHP code execution by supplying a crafted URL in the mosConfig_absolute_path parameter. Affected software is the Joomla! LMO extension (co...

CVE-2006-3970: Undefined Security Weakness

PHP remote file inclusion vulnerability in lmo.php in the LMO Component comlmo 1.0b2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...