CoreCVE
Back

HIGH

PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter

Published Sep 6, 2006

Description

PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file. Also, this might be related to CVE-2006-4242

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 6, 2006
Updated Aug 7, 2024
Reserved Sep 5, 2006
Link CVE-2006-4556
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2006-4556
Red Hat
Severity n/a
Public date n/a
Links CVE-2006-4556
ENISA EUVD
Assigner mitre
Published Sep 6, 2006
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2006-4544
EUVD-2006-4544