Unrated severityNVD Advisory· Published Aug 26, 2006· Updated Jun 16, 2026
CVE-2006-4375
CVE-2006-4375
Description
PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined
Affected products
2cpe:2.3:a:mambo:contacts_xtd_component:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mambo:contacts_xtd_component:*:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.