CVE-2006-4288

Affected software: Mambo CMS, com_a6mambocredits (a6mambocredits) component, versions 2.0.0 and earlier. Vulnerability: PHP remote file inclusion in admin.a6mambocredits.php that allows an attacker to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Impact (as stated): r...

CVE-2006-4264

Multiple PHP remote file inclusion vulnerabilities in the lmtgmyhomepage Component comlmtgmyhomepage for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 install.lmtghomepage.php and 2 mtghomepage.php. NOTE: this issue has been...

PT-2006-5095 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo com contentpublisher component affected versions not specified Description: A remote file inclusion issue exists in the contentpublisher component, allowing remote attackers to execute arbitrary PHP code via a URL in the mosConfig...

CVE-2006-4275

PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo comcatalogshop allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4280

PHP remote file inclusion vulnerability in anjel.index.php in ANJEL formerly MaMML Component comanjel for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a third party, who says that...

CVE-2006-4281

PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module comakocomment for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4280

PHP remote file inclusion vulnerability in anjel.index.php in ANJEL formerly MaMML Component comanjel for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by a third party, who says that...

CVE-2006-4275

PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo comcatalogshop allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4281

PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module comakocomment for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4281

CVE-2006-4281 describes a PHP remote file inclusion vulnerability in the AkoComment 1.1 module (com_akocomment) for Mambo 4.5. The flaw allows an attacker to cause remote PHP code execution via a URL supplied to the mosConfig_absolute_path parameter in akocomments.php. This is a vulnerability in ...

CVE-2006-4280

CVE-2006-4280 : The ANJEL (com_anjel) component for Mambo is affected by a PHP remote file inclusion vulnerability in anjel.index.php, exploitable via the mosConfig_absolute_path parameter to execute arbitrary PHP. The issue is disputed by a third party who claims mosConfig_absolute_path is set i...

CVE-2006-4263

Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop comphpshop for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 modphpshop.php, 2 modphpshopallinone.php...

CVE-2006-4264

Multiple PHP remote file inclusion vulnerabilities in the lmtgmyhomepage Component comlmtgmyhomepage for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 install.lmtghomepage.php and 2 mtghomepage.php. NOTE: this issue has been...

CVE-2006-4270

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component commambelfish 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4270

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component commambelfish 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4264

Multiple PHP remote file inclusion vulnerabilities in the lmtgmyhomepage Component comlmtgmyhomepage for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 install.lmtghomepage.php and 2 mtghomepage.php. NOTE: this issue has been...

CVE-2006-4264

CVE-2006-4264 describes multiple PHP remote file inclusion vulnerabilities in the Mambo component com_lmtg_myhomepage. The affected software is Mambo with the lmtg_myhomepage (com_lmtg_myhomepage) component; vulnerable files include install.lmtg_homepage.php and mtg_homepage.php, where an attacke...

EUVD-2006-4258

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component commambelfish 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4269

PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component comx-shop 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by third party researchers...

CVE-2006-4263

Summary (CVE-2006-4263) Multiple PHP remote file inclusion vulnerabilities affect mambo-phpshop (com_phpshop) for Mambo/Joomla! via the mosConfig_absolute_path parameter in eight modules: mod_phpshop.php, mod_phpshop_allinone.php, mod_phpshop_cart.php, mod_phpshop_featureprod.php, mod_phpshop_lat...