CVE-2006-4242

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

• http://secunia.com/advisories/21545Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1418
• http://www.osvdb.org/27990Exploit
• http://www.securityfocus.com/archive/1/443630/100/0/threaded
• http://www.securityfocus.com/bid/19575Exploit
• http://www.vupen.com/english/advisories/2006/3313
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28433
• https://www.exploit-db.com/exploits/2203
• http://secunia.com/advisories/21545Exploit, Vendor Advisory
• http://securityreason.com/securityalert/1418
• http://www.osvdb.org/27990Exploit
• http://www.securityfocus.com/archive/1/443630/100/0/threaded
• http://www.securityfocus.com/bid/19575Exploit
• http://www.vupen.com/english/advisories/2006/3313
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28433
• https://www.exploit-db.com/exploits/2203

Published

Aug 21, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4236Multiple PHP remote file inclusion vulnerabilities in POWERG…
• CVE-2006-4237PHP remote file inclusion vulnerability in pageheaderdefault…
• CVE-2006-4238SQL injection vulnerability in torrents.php in WebTorrent (W…
• CVE-2006-4239PHP remote file inclusion vulnerability in include/urights.p…
• CVE-2006-4240PHP remote file inclusion vulnerability in index.php in Fusi…
• CVE-2006-4241PHP remote file inclusion vulnerability in processor/reporte…
• CVE-2006-4243linux vserver 2.6 before 2.6.17 suffers from privilege escal…9.8
• CVE-2006-4244SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verif…
• CVE-2006-4245archivemail 0.6.2 uses temporary files insecurely leading to…8.1
• CVE-2006-4246Usermin before 1.220 (20060629) allows remote attackers to r…
• CVE-2006-4247Unspecified vulnerability in the Password Reset Tool before …
• CVE-2006-4248thttpd on Debian GNU/Linux, and possibly other distributions…