CVE-2006-4269

PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla!

published August 21, 2006

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02797 · 86.3th percentile
Published
2006-08-21T21:00Z
EPSS history
Timeline
  • 21 AUG 21:00Z
    PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla!
    cvelistv5