high7.5Public exploit code
CVE-2006-3930
PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mambo Component 'com_a6mambohelpdesk' 18RC1 - Remote File Inclusion2006-07-27 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mamboxchange | A6mambohelpdesk | through 1.2 Version 18_rc1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21227
- http://securityreason.com/securityalert/1309
- http://www.osvdb.org/27654
- http://www.securityfocus.com/archive/1/441286/100/0/threaded
- http://www.securityfocus.com/bid/19198
- http://www.vupen.com/english/advisories/2006/3015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28054
- https://www.exploit-db.com/exploits/2078
- http://secunia.com/advisories/21227
- http://securityreason.com/securityalert/1309
- http://www.osvdb.org/27654
- http://www.securityfocus.com/archive/1/441286/100/0/threaded
- http://www.securityfocus.com/bid/19198
- http://www.vupen.com/english/advisories/2006/3015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28054
- https://www.exploit-db.com/exploits/2078