CVE-2006-3530

PHP remote file inclusion vulnerability in com_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Joomla 0.3 and possibly up to 1.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_absolute_path parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:joomla:pc_cookbook:0.3:*:*:*:*:*:*:*
cpe:2.3:a:joomla:pc_cookbook:1.3.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:13

Type Values Removed Values Added
References () http://advisories.echo.or.id/adv/adv37-matdhule-2006.txt - Exploit () http://advisories.echo.or.id/adv/adv37-matdhule-2006.txt - Exploit
References () http://secunia.com/advisories/21015 - Vendor Advisory () http://secunia.com/advisories/21015 - Vendor Advisory
References () http://securityreason.com/securityalert/1215 - () http://securityreason.com/securityalert/1215 -
References () http://www.securityfocus.com/archive/1/439618/100/0/threaded - () http://www.securityfocus.com/archive/1/439618/100/0/threaded -
References () http://www.securityfocus.com/bid/18919 - () http://www.securityfocus.com/bid/18919 -
References () http://www.vupen.com/english/advisories/2006/2739 - () http://www.vupen.com/english/advisories/2006/2739 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27641 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27641 -
References () https://www.exploit-db.com/exploits/2024 - () https://www.exploit-db.com/exploits/2024 -

Information

Published : 2006-07-12 21:05

Updated : 2024-11-21 00:13


NVD link : CVE-2006-3530

Mitre link : CVE-2006-3530

CVE.ORG link : CVE-2006-3530


JSON object : View

Products Affected

joomla

  • pc_cookbook
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')