NVD

Id
63017  
Name
CVE-2006-4378  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for Joomla! (com_rssxt), possibly 2.0 Beta 1 or 1.0 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) pinger.php, (2) RPC.php, or (3) rssxt.php. NOTE: another researcher has disputed this issue, saying that the attacker can not control this parameter. In addition, as of 20060825, the original researcher has appeared to be unreliable with some other past reports. CVE has not performed any followup analysis with respect to this issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-26  
Modified Date
2008-09-05  
Seq
2006-4378  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328081 63017 CVE-2006-4378 1456  View
328082 63017 CVE-2006-4378 20060818 Joomla Rssxt <= 1.0 Remote File Include Vulnerability  View
328083 63017 CVE-2006-4378 20060818 Re: Joomla Rssxt <= 1.0 Remote File Include Vulnerability  View
328084 63017 CVE-2006-4378 19593  View

Related JVN