CVE-2006-4859

no score yetEPSS 7.5%

Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression.

EPSS: 7.5% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2006-09-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

limbo_cms:limbo_cms

References

http://www.securityfocus.com/bid/20044
https://www.exploit-db.com/exploits/2370
http://www.securityfocus.com/bid/20044
https://www.exploit-db.com/exploits/2370

Check your stack JSON