CVE-2006-3949 – Joomla! Component Artlinks 1.0b4 - Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-3949

PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Vulnerabilidad PHP de inclusión remota de archivo en artlinks.dispnew.php en el componente Artlinks (com_artlinks) para Mambo permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path. • https://www.exploit-db.com/exploits/2209 http://securityreason.com/securityalert/1318 http://www.securityfocus.com/archive/1/441541/100/0/threaded http://www.securityfocus.com/bid/19223 https://exchange.xforce.ibmcloud.com/vulnerabilities/28075 • CWE-94: Improper Control of Generation of Code ('Code Injection') •