2 matches found
CVE-2004-1693
CVE-2004-1693 affects Mambo 4.5 (1.0.9) via Function.php. The vulnerability arises from a PHP remote file inclusion: by setting mosConfig_absolute_path to reference a URL on a remote server that contains code, an attacker can execute arbitrary PHP on the affected system. This is a remote code exe...
CVE-2004-1693
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 1.0.9 allows remote attackers to execute arbitrary PHP code by modifying the mosConfigabsolutepath parameter to reference a URL on a remote web server that contains the code...