CVE-2006-4995: High severity joomla vulnerability
Published Sep 26, 2006
·Updated
PHP remote file inclusion vulnerability in BSQ Sitestats (bsqsitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
1 affected component
Joomla BSQ Sitestats=2.1.1
Event History
Sep 26, 2006
CVE Published
via MITRE·01:43 AM
Data Sourced
via MITRE·01:43 AM
Description
Data Sourced
via NVD·02:07 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-4995?
CVE-2006-4995 is considered a critical vulnerability as it allows remote attackers to execute arbitrary PHP code.
2
How do I fix CVE-2006-4995?
To fix CVE-2006-4995, update the BSQ Sitestats extension to version 2.1.1 or later.
3
What software is affected by CVE-2006-4995?
CVE-2006-4995 affects the BSQ Sitestats extension for Joomla! versions prior to 2.1.1.
4
What is the impact of CVE-2006-4995?
The impact of CVE-2006-4995 allows attackers to execute arbitrary code on the server, potentially leading to full compromise of the system.
5
Who can exploit CVE-2006-4995?
CVE-2006-4995 can be exploited by remote attackers who can manipulate the mosConfig_absolute_path parameter.