Unscored CVE-2006-4375 EUVD-2006-4363GHSA-hfhx-25r6-4mcj

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote …

Published Aug 26, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined

References

20060821 Re: Mambo Component - Display MOSBot Manager Remote File InclusionVuln mailing-list
1451 third-party-advisory
28091 vdb-entry
20060820 Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln mailing-list