CVE-2006-4264

The Mambo CMS lmtg_myhomepage component (also referred to as com_lmtg_myhomepage) is reported to have multiple PHP remote file inclusion vulnerabilities. These potentially allow remote attackers to execute arbitrary PHP code by providing a URL via the mosConfig_absolute_path parameter in the inst...

CVE-2006-4264: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the lmtgmyhomepage Component comlmtgmyhomepage for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 install.lmtghomepage.php and 2 mtghomepage.php. NOTE: this issue has been...