CVE-2006-6049

CVE-2006-6049 affects the Shambo2 (com_shambo2) component for Mambo 4.5. The vulnerability is a PHP remote file inclusion in shambo2.php, exploitable via a URL parameter mosConfig_absolute_path, enabling arbitrary PHP code execution. Root cause: unvalidated/unsafely used parameter allowing inclus...

CVE-2008-0606

CVE-2008-0606 describes a SQL injection vulnerability in the Shambo2 (com_shambo2) component used by Mambo and Joomla!. The vulnerability is triggered in index.php via the Itemid parameter, allowing remote attackers to execute arbitrary SQL commands. Multiple sources (NVD, CVE lists, Prio) consis...