Description
PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
References
- akocomment-akocomments-file-include(28458) vdb-entry
- 20060819 Ako Comments (mod) Remote File Inclusion mailing-list
- 1435 third-party-advisory
- 19602 vdb-entry