Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Mambo Subscribe
Filtered by product Contacts Xtd Component
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4375 1 Mambo 1 Contacts Xtd Component 2018-10-17 7.5 HIGH N/A
** DISPUTED ** PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined.