PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo allows remote malicious users to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version. The original researcher is known to be frequently inaccurate
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mambo mambo 4.6 |
||
mambo mambo 4.5_1.0.1 |
||
mambo mambo 4.5.2 |
||
mambo mambo 4.5_1.0.3_beta |
||
mambo mambo 4.5.0.2 |
||
mambo mambo 4.5.2.2 |
||
mambo mambo 4.5.1_1.0.9 |
||
mambo mambo 4.5.2.3 |
||
mambo mambo 4.5.3h |
||
mambo mambo 4.5.1a |
||
mambo mambo 4.5_1.0.0 |
||
mambo mambo 4.5.2.1 |
||
mambo mambo 4.0.14 |
||
mambo mambo 4.5.1.3 |
||
mambo mambo 4.5_1.0.2 |
||
mambo mambo 4.5_1.0.9 |
Vulmon