CVE-2006-3980

The CVE-2006-3980 entry describes a PHP remote file inclusion in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5, caused by using a URL in mosConfig_absolute_path within administrator/components/com_mgm/help.mgm.php. This vulnerability allows remote attackers to execute arbitrary PHP...

CVE-2006-3981

The CVE-2006-3981 entry describes a PHP remote file inclusion vulnerability in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5. The flaw allows an attacker to execute arbitrary PHP code via a URL supplied in the mosConfig_absolute_path parameter. Affected component is MGM’s about.mgm...