CVE-2006-6634

The CVE-2006-6634 entry describes multiple PHP remote file inclusion vulnerabilities in ExtCalThai (com_extcalendar) 0.9.1 and earlier for Mambo. The issue allows an attacker to execute arbitrary PHP code via crafted URLs in three parameters: CONFIG_EXT[LANGUAGES_DIR] to admin_events.php, mosConf...