Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Joomla Subscribe
Filtered by product X-shop Component
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-4269 2 Joomla, Mambo 2 X-shop Component, X-shop Component 2018-10-17 7.5 HIGH N/A
** DISPUTED ** PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by third party researchers, stating that there is no mosConfig_absolute_path parameter and no admin.x-shop.php file in the reported package.