CVE-2006-6962: Code Injection
Published Jan 29, 2007
·Updated
PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (comrsgallery2) 1.11.2 for Joomla! allows attackers to execute arbitrary PHP code via the mosConfigabsolutepath parameter. NOTE: this issue may overlap CVE-2006-5047.
Affected Software
1 affected component
Joomla RS Gallery2=1.11.2
Event History
Jan 29, 2007
CVE Published
04:28 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6962?
CVE-2006-6962 is classified as a high severity vulnerability that allows remote file inclusion.
2
How do I fix CVE-2006-6962?
To fix CVE-2006-6962, you should upgrade the RS Gallery2 component to a version that is not affected by this vulnerability.
3
What versions of RS Gallery2 are affected by CVE-2006-6962?
CVE-2006-6962 affects RS Gallery2 version 1.11.2 for Joomla!.
4
Can CVE-2006-6962 lead to remote code execution?
Yes, CVE-2006-6962 can allow attackers to execute arbitrary PHP code remotely.
5
Is CVE-2006-6962 related to any other vulnerabilities?
Yes, CVE-2006-6962 may overlap with CVE-2006-5047, indicating related issues in the same software.