CVE-2006-4281: High severity Arthur Konze Webdesign Akocomment vulnerability
Published Aug 21, 2006
·Updated
PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (comakocomment) for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
1 affected component
Arthur Konze Webdesign Akocomment=1.1
Event History
Aug 21, 2006
CVE Published
10:04 PM
Aug 22, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4281?
CVE-2006-4281 is considered a critical vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2006-4281?
To fix CVE-2006-4281, upgrade to a version of the AkoComment module that has patched the vulnerability.
3
What software is affected by CVE-2006-4281?
CVE-2006-4281 affects AkoComment version 1.1 used with Mambo 4.5.
4
What type of vulnerability is CVE-2006-4281?
CVE-2006-4281 is a remote file inclusion vulnerability.
5
Can CVE-2006-4281 be exploited without authentication?
Yes, CVE-2006-4281 can be exploited by unauthenticated attackers.