Security Advisory

CVE-2006-4280

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-08-21 22:00:00

Last updated 2024-08-07 19:06:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by a third party, who says that $mosConfig_absolute_path is set in a configuration file

← Browse all CVEs View on cve.org ↗