CVE

Id
20476  
CVE No.
CVE-2006-4372  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin.lurm_constructor.php in the Lurm Constructor component (com_lurm_constructor) 0.6b and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the lm_absolute_path parameter.  
Phase
Assigned (20060825)  
Votes
None (candidate not yet proposed)  
Comments