CVE-2006-4858 – Mambo Serverstat Remote Code Execution

Description

PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.


Vulnerability Information

  • Product / Framework: Mamboxchange
  • Vendor Domain: sourceforge.net
  • Vulnerability Type: Code Injection
  • CVE Details: View Full CVE Details →