CVE-2006-4375

The CVE concerns Mambo’s Contacts XTD component (com_contxtd) with a PHP remote file inclusion in contxtd.class.php. The vulnerability allows an attacker to supply a URL via mosConfig_absolute_path to execute arbitrary PHP code on the server. A mitigating note in the records states the attack may...