CVE-2006-4553: Code Injection
Published Sep 6, 2006
·Updated
PHP remote file inclusion vulnerability in plugin.class.php in the comcomprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
2 affected components
Mambo Com Comprofiler Component=1.0_rc2
Joomla Com Comprofiler Component=1.0_rc2
Event History
Sep 6, 2006
CVE Published
12:04 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4553?
CVE-2006-4553 is classified as a critical vulnerability, allowing remote code execution.
2
How do I fix CVE-2006-4553?
To fix CVE-2006-4553, you should upgrade to a patched version of the com_comprofiler component that addresses this vulnerability.
3
Which products are affected by CVE-2006-4553?
CVE-2006-4553 affects the com_comprofiler components for Mambo and Joomla! specifically version 1.0 RC2.
4
Can CVE-2006-4553 allow arbitrary code execution?
Yes, CVE-2006-4553 allows remote attackers to execute arbitrary PHP code on the affected systems.
5
What parameter is exploited in CVE-2006-4553?
CVE-2006-4553 exploits a vulnerability in the mosConfig_absolute_path parameter within plugin.class.php.