CVE-2006-4363 - PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter

Published Aug 25, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.81%

Description

PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://securityreason.com/securityalert/1450
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/443762/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19605
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4351
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28465
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2217
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://securityreason.com/securityalert/1450		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/443762/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19605		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4351		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28465		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2217		exploitx_refsource_EXPLOIT-DB