CVE-2006-4375: High severity Mambo Contacts Xtd Component vulnerability
DISPUTED PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (comcontxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether VALIDMOS is defined.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4375?
The severity of CVE-2006-4375 is considered to be high due to the potential for remote code execution.
How do I fix CVE-2006-4375?
To mitigate CVE-2006-4375, ensure that the software is updated to a patched version that addresses the vulnerability.
What types of systems are affected by CVE-2006-4375?
CVE-2006-4375 affects instances of the Mambo CMS that utilize the Contacts XTD component.
Can CVE-2006-4375 lead to unauthorized access?
Yes, CVE-2006-4375 can allow attackers to execute arbitrary PHP code, potentially leading to unauthorized access.
Is CVE-2006-4375 still a threat today?
While CVE-2006-4375 is older, any unpatched software may still be vulnerable and pose a security risk.