Description
PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
References
- 20060819 Mambo CatalogShop Remote File Inclusion mailing-list
- 1433 third-party-advisory
- catalogshop-absolutepath-file-include(28462) vdb-entry
- 19604 vdb-entry