CVE-2006-4556

https://notcve.org/view.php?id=CVE-2006-4556

PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file. Also, this might be related to CVE-2006-4242 ** DISCUTIDA ** Vulnerabilidad PHP de inclusión remota de archivo en index.php en el componente JIM para Mambo and Joomla! permite a un atacante remoto ejecutar código PHP de su elección a través de una URL en el parámetro mosConfig_absolute_path. • http://www.osvdb.org/28097 http://www.securityfocus.com/archive/1/443674/100/100/threaded http://www.securityfocus.com/archive/1/444216/100/100/threaded •