CVE-2006-3340

State: Published
Severity: Not scored
Published: Jul 3, 2006
Updated: Aug 7, 2024
Reserved: Jul 3, 2006

Description

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the "includes" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

27169vdb-entry
27171vdb-entry
1956exploit
27173vdb-entry
27175vdb-entry
27168vdb-entry
27170vdb-entry
27174vdb-entry
18690vdb-entry
27177vdb-entry
27172vdb-entry
20819third-party-advisory
27178vdb-entry
ADV-2006-2561vdb-entry
27176vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.