CVE

Id
20660  
CVE No.
CVE-2006-4556  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file. Also, this might be related to CVE-2006-4242.  
Phase
Assigned (20060905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
194405 20660 CVE-2006-4556 BUGTRAQ:20060817 Joomla RFİ ( ERNE )  View
194406 20660 CVE-2006-4556 URL:http://www.securityfocus.com/archive/1/archive/1/443674/100/100/threaded  View
194407 20660 CVE-2006-4556 BUGTRAQ:20060823 Re: Joomla RFİ ( ERNE )  View
194408 20660 CVE-2006-4556 URL:http://www.securityfocus.com/archive/1/archive/1/444216/100/100/threaded  View
194409 20660 CVE-2006-4556 OSVDB:28097  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58927 JVNDB-2006-001193 DeluxeBB における PHP リモートファイルインクルージョンの脆弱性 DeluxeBB には、mod_mime モジュールを伴う Apache HTTP Server 上で稼動する際、任意の PHP コードを実行される脆弱性が存在します。 CVE-2006-4558 20660 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001193.html  View