CVE-2006-4203

CVE-2006-4203 describes a PHP remote file inclusion vulnerability in the Mambo CMS, affecting the MMP Component (com_mmp) version 1.2 and earlier. The flaw lies in help.mmp.php, where the mosConfig_absolute_path parameter can be used by a remote attacker to include a URL and execute arbitrary PHP...