CVE

Id
20390  
CVE No.
CVE-2006-4286  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version. The original researcher is known to be frequently inaccurate.  
Phase
Assigned (20060822)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
189671 20390 CVE-2006-4286 BUGTRAQ:20060817 contentpublisher Mambo Component Remote File Include Vulnerabilities  View
189672 20390 CVE-2006-4286 URL:http://www.securityfocus.com/archive/1/archive/1/443626/100/0/threaded  View
189673 20390 CVE-2006-4286 BUGTRAQ:20060823 Re: contentpublisher Mambo Component Remote File Include Vulnerabilities  View
189674 20390 CVE-2006-4286 URL:http://www.securityfocus.com/archive/1/444244/100/0/threaded  View
189675 20390 CVE-2006-4286 OSVDB:28093  View
189676 20390 CVE-2006-4286 URL:http://www.osvdb.org/28093  View
189677 20390 CVE-2006-4286 SREASON:1431  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59720 JVNDB-2006-001986 Mambo の a6mambocredits コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 Mambo の a6mambocredits コンポーネント (com_a6mambocredits) の admin.a6mambocredits.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4288 20390 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001986.html  View