CVE-2006-4130
PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- matt_smith:remository_for_mambo
References
- http://secunia.com/advisories/21477
- http://securityreason.com/securityalert/1379
- http://www.remository.com/component/option%2Ccom_mamboboard/func%2Cview/catid%2C6/id%2C3666/#3666
- http://www.remository.com/rem/Remository/Download/Mambo-Software/ReMOSitory-components/Remository-3.26/
- http://www.securityfocus.com/archive/1/442869/100/0/threaded