CVE-2006-4375

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute…

published August 26, 2006

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01508 · 74.1th percentile
Published
2006-08-26T01:00Z
EPSS history
Timeline
  • 26 AUG 01:00Z
    PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute…
    cvelistv5