Lucene search

MitreCVE-2006-4269

HistoryAug 21, 2006 - 9:04 p.m.

CVE-2006-4269

2006-08-2121:04:00

mitre

web.nvd.nist.gov

cve-2006-4269

vulnerability

remote file inclusion

com_x-shop

mambo

joomla

php

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.015

Percentile

87.1%

JSON

PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package

Affected configurations

Nvd

Node

joomlax-shop_componentRange≤1.7

mambox-shop_componentRange≤1.7

VendorProductVersionCPE
joomlax-shop_component*cpe:2.3:a:joomla:x-shop_component:*:*:*:*:*:*:*:*
mambox-shop_component*cpe:2.3:a:mambo:x-shop_component:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
joomla	x-shop_component	*	cpe:2.3:a:joomla:x-shop_component::::::::
mambo	x-shop_component	*	cpe:2.3:a:mambo:x-shop_component::::::::

References

archives.neohapsis.com/archives/bugtraq/2006-08/0427.html

www.osvdb.org/28095

www.securityfocus.com/archive/1/443625/100/0/threaded

www.securityfocus.com/bid/19588

exchange.xforce.ibmcloud.com/vulnerabilities/28451

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.015

Percentile

87.1%

JSON

Related for CVE-2006-4269