CVE-2006-4288

MITTEL 6.8CVE-2006-4288 · Published 22/08/2006 · updated 16/06/2026

Kurz gesagt

CVE-2006-4288 ist eine Schwachstelle (MITTEL (CVSS 6.8)) in a6mambocredits component (mambo).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.8%, höher als bei 93.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
a6mambocredits component mambo	`= 2.0.0`	No fix yet

Description

PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits) 2.0.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/21540 · Exploit
securitytracker.com/id · Exploit
osvdb.org/27991
securityfocus.com/bid/19581 · Exploit
vupen.com/english/advisories/2006/3311
exchange.xforce.ibmcloud.com/vulnerabilities/28443
exploit-db.com/exploits/2207

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free