CVE

Id
20234  
CVE No.
CVE-2006-4130  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187641 20234 CVE-2006-4130 BUGTRAQ:20060810 Mambo/Joomla Component Remository v3.25 (mosConfig_absolute_path) Remote File Inclusion Vulnerability  View
187642 20234 CVE-2006-4130 URL:http://www.securityfocus.com/archive/1/archive/1/442869/100/0/threaded  View
187643 20234 CVE-2006-4130 CONFIRM:http://www.remository.com/component/option,com_mamboboard/func,view/catid,6/id,3666/#3666  View
187644 20234 CVE-2006-4130 CONFIRM:http://www.remository.com/rem/Remository/Download/Mambo-Software/ReMOSitory-components/Remository-3.26/  View
187645 20234 CVE-2006-4130 BID:19465  View
187646 20234 CVE-2006-4130 URL:http://www.securityfocus.com/bid/19465  View
187647 20234 CVE-2006-4130 VUPEN:ADV-2006-3270  View
187648 20234 CVE-2006-4130 URL:http://www.vupen.com/english/advisories/2006/3270  View
187649 20234 CVE-2006-4130 SECUNIA:21477  View
187650 20234 CVE-2006-4130 URL:http://secunia.com/advisories/21477  View
187651 20234 CVE-2006-4130 SREASON:1379  View
187652 20234 CVE-2006-4130 URL:http://securityreason.com/securityalert/1379  View
187653 20234 CVE-2006-4130 XF:remository-admin-file-include(28330)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58824 JVNDB-2006-001090 ArcSoft MMS Composer におけるサービス運用妨害 (DoS) の脆弱性 ArcSoft MMS Composer には、サービス運用妨害 (リソース消耗およびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2006-4132 20234 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001090.html  View