CVE Database
/

CVE-2006-4263

Back to search

CVE-2006-4263

Published: Aug 21, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules in mambo-phpshop (com_phpshop) for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) mod_phpshop.php, (2) mod_phpshop_allinone.php, (3) mod_phpshop_cart.php, (4) mod_phpshop_featureprod.php, (5) mod_phpshop_latestprod.php, (6) mod_product_categories.php, (7) mod_productscroller.php, and (8) mosproductsnap.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

19591
vdb-entry
x_refsource_BID
28153
vdb-entry
x_refsource_OSVDB
28152
vdb-entry
x_refsource_OSVDB
28158
vdb-entry
x_refsource_OSVDB
28155
vdb-entry
x_refsource_OSVDB
28151
vdb-entry
x_refsource_OSVDB
28156
vdb-entry
x_refsource_OSVDB
28154
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now