CVE-2006-3530: Code Injection

Published Jul 12, 2006

Updated

PHP remote file inclusion vulnerability in compccookbook/pccookbook.php in the PccookBook Component for Mambo and Joomla 0.3 and possibly up to 1.3.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfigabsolutepath parameter.

Affected Software

2 affected components

Joomla Pc Cookbook=0.3

Joomla Pc Cookbook=1.3.1

Event History

Jul 12, 2006

CVE Published

09:05 PM

Jul 13, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3530?

CVE-2006-3530 is considered a critical vulnerability due to its potential to allow remote attackers to execute arbitrary PHP code.

How do I fix CVE-2006-3530?

To fix CVE-2006-3530, disable register_globals in your PHP configuration and upgrade to a secure version of the PccookBook Component.

What software is affected by CVE-2006-3530?

CVE-2006-3530 affects the PccookBook Component for Mambo and Joomla versions 0.3 and 1.3.1.

Can CVE-2006-3530 be exploited remotely?

Yes, CVE-2006-3530 can be exploited remotely, allowing attackers to execute malicious code on the server.

What is the main cause of CVE-2006-3530?

The main cause of CVE-2006-3530 is the use of user-supplied input in file inclusion without proper validation.