CVE-2006-7104

no score yetEPSS 2.3%

PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created on May 2006, a component for Mambo 4.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-03-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mambo:mostlyce

References

http://securityreason.com/securityalert/2363
http://www.securityfocus.com/archive/1/448786
http://www.securityfocus.com/bid/20549
https://exchange.xforce.ibmcloud.com/vulnerabilities/29598
http://securityreason.com/securityalert/2363

Check your stack JSON