CVE-2006-0871

Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter. NOTE: CVE-2006-1794 has been assigned to the SQL injection vector.

• CWE-22

• http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html
• http://secunia.com/advisories/18935Patch, Vendor Advisory
• http://securityreason.com/securityalert/493
• http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/Patch
• http://www.gulftech.org/?node=research&article_id=00104-02242006
• http://www.osvdb.org/23505
• http://www.vupen.com/english/advisories/2006/0719Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html
• http://secunia.com/advisories/18935Patch, Vendor Advisory
• http://securityreason.com/securityalert/493
• http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/Patch
• http://www.gulftech.org/?node=research&article_id=00104-02242006
• http://www.osvdb.org/23505
• http://www.vupen.com/english/advisories/2006/0719Vendor Advisory

Published

Feb 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0865PunBB 1.2.10 and earlier allows remote attackers to cause a …
• CVE-2006-0866PunBB 1.2.10 and earlier allows remote attackers to conduct …
• CVE-2006-0867Buffer overflow in certain versions of South River (aka SRT)…
• CVE-2006-0868Multiple unspecified injection vulnerabilities in unspecifie…
• CVE-2006-0869Directory traversal vulnerability in the "remember me" featu…
• CVE-2006-0870SQL injection vulnerability in pages.asp in Mini-Nuke CMS Sy…
• CVE-2006-0872Directory traversal vulnerability in init.inc.php in Copperm…
• CVE-2006-0873Absolute path traversal vulnerability in docs/showdocs.php i…
• CVE-2006-0874Multiple unspecified vulnerabilities in Intensive Point iUse…
• CVE-2006-0875Cross-site scripting vulnerability in ratefile.php in RunCMS…
• CVE-2006-0876POPFile before 0.22.4 allows remote attackers to cause a den…
• CVE-2006-0877Cross-site scripting vulnerability in Easy Forum 2.5 allows …