Unrated severityNVD Advisory· Published Aug 18, 2006· Updated Jun 16, 2026
CVE-2006-4229
CVE-2006-4229
Description
PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
3cpe:2.3:a:joomla:moslistmessenger_component:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:joomla:moslistmessenger_component:*:*:*:*:*:*:*:*
- (no CPE)range: <20060719
- cpe:2.3:a:mambo:moslistmessenger_component:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- secunia.com/advisories/21531nvdVendor Advisory
- blog.phil-taylor.com/2006/08/09/information-on-moslistmessenger-security-hardening/nvd
- forum.joomla.org/index.phpnvd
- www.securityfocus.com/archive/1/443356/100/0/threadednvd
- www.vupen.com/english/advisories/2006/3304nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28405nvd
News mentions
0No linked articles in our index yet.