CVE-2006-4269
Last modified
CVE-2006-4269 is a vulnerability of currently unknown severity. PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package. EPSS estimates a 2.67% chance of exploitation in the next 30 days.
Description
PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Joomla | X-Shop Component | <= 1.7 |
| Mambo | X-Shop Component | <= 1.7 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4269?
How severe is CVE-2006-4269?
How do I fix CVE-2006-4269?
Are you affected by CVE-2006-4269?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST