exploitDog

CVE-2006-4195

Опубликовано: 17 авг. 2006

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mamboxchange:peoplebook:*:*:*:*:*:*:*:*

Версия до 1.1.2 (включая)

cpe:2.3:a:mamboxchange:peoplebook:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10243

Средний

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-r52f-5hg7-pqvr

github

почти 4 года назад

PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

EPSS

Процентиль: 93%

0.10243

Средний

6.8 Medium

CVSS2

Дефекты

CWE-94