CVE-2006-4242 - PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter

Back Back to CVE browser

MEDIUM

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter

Published Aug 21, 2006

5.1

MEDIUM

CVSS 2.0

EPSS 3.42%

Description

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (8)

http://secunia.com/advisories/21545
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/1418
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/27990
vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/443630/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19575
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/3313
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28433
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2203
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/21545		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/1418		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/27990		vdb-entryx_refsource_OSVDBExploit
http://www.securityfocus.com/archive/1/443630/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19575		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/3313		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28433		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2203		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 21, 2006

Updated Aug 7, 2024

Reserved Aug 21, 2006

Link CVE-2006-4242

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4242

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4242