CVE-2006-3749: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component comsitemap 2.0.0 for Mambo 4.5.1 CMS, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...