CVE-2006-4275

CVE-2006-4275 affects the CatalogShop component (com_catalogshop) in Mambo. The vulnerability is a PHP remote file inclusion in catalogshop.php that lets an attacker supply a URL via the mosConfig_absolute_path parameter to execute arbitrary PHP code on the server. Documented impact is arbitrary ...