PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
📦
mambo_gallery_manager
Vendor: mambo
Actively Exploited
0
CISA KEV List
PoC / Exploits
1
Code Available
Total RCEs
1
Remote Access
Total CVEs
2
Total Indexed
Avg. EPSS
8.40%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
6.8
CVSS
CVE-2006-3980
RCE
Exploit Found
Severity: MEDIUM
7.5
CVSS
PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Severity: HIGH