CVE-2006-3990

Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the commtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 Savant2Pluginstylesheet.php, 2...

CVE-2006-3990

CVE-2006-3990: Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2 (often with com_mtree for Mambo/Joomla!) allow remote execution of PHP code via a URL in mosConfig_absolute_path across 34 Savant2 plugin files. Root cause: RFI through the listed plugin files (stylesheets,...