CVE-2006-3302

The CVE describes a PHP remote file inclusion in CBSMS Mambo Module 1.0 and earlier. When register_globals is enabled, an attacker can inject a URL via the mosC_a_path parameter to execute arbitrary PHP code on the affected system. Connected documents corroborate the vulnerability class and note ...

CVE-2006-3302: Undefined Security Weakness

PHP remote file inclusion vulnerability in modcbsms.php in CBSMS Mambo Module 1.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosCapath parameter. NOTE: the provenance of this information is unknown; portions of the details...