high7.5Public exploit code
CVE-2006-4859
Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows rem…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Limbo CMS 1.0.4.2L - 'com_contact' Remote Code Execution2006-09-15 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limbo Cms | Limbo Cms | Versions 1.0.4.1, 1.0.4.2, 1.0.4.2l |