EUVD-2006-6032

Malware in sbrugna...

CVE-2006-6049

CVE-2006-6049 affects the Shambo2 (com_shambo2) component for Mambo 4.5. The vulnerability is a PHP remote file inclusion in shambo2.php, exploitable via a URL parameter mosConfig_absolute_path, enabling arbitrary PHP code execution. Root cause: unvalidated/unsafely used parameter allowing inclus...