| Package | Affected versions | Patched versions |
|---|---|---|
| mambo | = 4.5.3h |
Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter. NOTE: CVE-2006-1794 has been assigned to the SQL injection vector.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free