CVE-2006-4275

no score yetEPSS 1.5%

PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
Published: 2006-08-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mambo:catalogshop_component

References

http://securityreason.com/securityalert/1433
http://www.securityfocus.com/archive/1/443758/100/0/threaded
http://www.securityfocus.com/bid/19604
https://exchange.xforce.ibmcloud.com/vulnerabilities/28462
http://securityreason.com/securityalert/1433

Check your stack JSON