CVE-2006-3930 - CVE House
Back to Database
Status published High CVE-2006-3930

PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo...

Vulnerability Description

PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3930

Credits & Attribution

No credits recorded in the NVD database.

References

More from mamboxchange

View All →
CVE-2008-0500
Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact...
Critical 10
CVE-2008-0499
SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers...
High 7.5
CVE-2007-1992
Multiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5...
High 7.5
CVE-2006-7093
Cross-site scripting (XSS) vulnerability in Mambo LaiThai 4.5.4 Security Patch...
Medium 5.8
CVE-2006-7092
SQL injection vulnerability in includes/mambo.php in Mambo LaiThai 4.5.4 SP2...
High 7.5

Affected Vendor

mamboxchange

View all reports →

Affected Software

a6mambohelpdesk
Vulnerable Versions:
0, 18_rc1

Timeline

Official Publish: July 31st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.