📦

peoplebook

Vendor: mamboxchange

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 1 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 10.24% Exploit Prob.
Latest CVE CVE-2006-4195 Aug 17

Security Vulnerability Index

Page 1 / 1
6.8 CVSS
CVE-2006-4195
RCE Exploit Found

PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

EPSS: 10.24%