CVE-2006-3981

PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-08-05

Last modified

2024-08-07

Affected products

• Mambo Gallery Manager (Mambo)

References

• http://www.vupen.com/english/advisories/2006/3054
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28072