CVE-2006-3962: High severity Mambo bayesiannaivefilter vulnerability
PHP remote file inclusion vulnerability in administrator/components/combayesiannaivefilter/lang.php in the bayesiannaivefilter component (combayesiannaivefilter) 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3962?
CVE-2006-3962 has a high severity due to its ability to allow remote code execution.
How do I fix CVE-2006-3962?
To fix CVE-2006-3962, update the bayesiannaivefilter component to a version that is not vulnerable.
What systems are affected by CVE-2006-3962?
CVE-2006-3962 affects Mambo version 1.1 when using the bayesiannaivefilter component.
What kind of attack can exploit CVE-2006-3962?
An attacker can exploit CVE-2006-3962 by manipulating the mosConfig_absolute_path parameter to execute arbitrary PHP code.
Is CVE-2006-3962 easy to exploit?
Yes, CVE-2006-3962 is considered relatively easy to exploit, making systems vulnerable if not patched.