CVE-2006-4296

CVE-2006-4296 is a PHP remote file inclusion vulnerability in Mambo 1.1, specifically within the bigAPE-Backup component (com_babackup) and its Tar.php. The root cause is that the mosConfig_absolute_path parameter can be used by an attacker to include arbitrary files, enabling remote code inclusi...