7.5
CVSSv2

CVE-2006-3967

Published: 01/08/2006 Updated: 17/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote malicious users to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

moskool moskool 1.5

Exploits

source: wwwsecurityfocuscom/bid/19245/info Moskool is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context of the webserver process This may allow the attacke ...