CVE-2006-4286: High severity Mambo Mambo vulnerability
DISPUTED PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (comcontentpublisher) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version. The original researcher is known to be frequently inaccurate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4286?
The severity of CVE-2006-4286 is classified as medium risk due to its potential for remote code execution.
How do I fix CVE-2006-4286?
To fix CVE-2006-4286, you should upgrade to a patched version of Mambo that addresses this vulnerability.
Which versions of Mambo are affected by CVE-2006-4286?
CVE-2006-4286 affects Mambo versions 4.6-rc1 and 4.5.x, including multiple sub-versions.
Can CVE-2006-4286 be exploited remotely?
Yes, CVE-2006-4286 can be exploited remotely by attackers through crafted URLs.
What is the impact of CVE-2006-4286 on my Mambo installation?
The impact of CVE-2006-4286 allows unauthorized users to execute arbitrary PHP code on vulnerable Mambo installations.