high7.5Public exploit code
CVE-2006-4296
PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mambo Component bigAPE-Backup 1.1 - Remote File Inclusion2006-08-19 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mambo | Bigape-Backup Component | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21574
- http://www.osvdb.org/28032
- http://www.securityfocus.com/bid/19616
- http://www.vupen.com/english/advisories/2006/3340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28468
- https://www.exploit-db.com/exploits/2225
- http://secunia.com/advisories/21574
- http://www.osvdb.org/28032
- http://www.securityfocus.com/bid/19616
- http://www.vupen.com/english/advisories/2006/3340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28468
- https://www.exploit-db.com/exploits/2225