| Package | Affected versions | Patched versions |
|---|---|---|
| mambo | = 4.0.14= 4.5= 4.5.0.2= 4.5.1.3= 4.5.1_1.0.9= 4.5.1_beta= 4.5.1_beta2= 4.5.1a= 4.5.2= 4.5.2.1= 4.5.2.2= 4.5.2.3= 4.5.3h= 4.5.4= 4.5_1.0.0= 4.5_1.0.1= 4.5_1.0.2= 4.5_1.0.3_beta= 4.5_1.0.9= 4.6= 4.6.1= 4.6.2= 4.6.4 |
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free