CVE-2004-1693
Mambo 4.5 (1.0.9) - Remote File Inclusion via mosConfig_absolute_path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-1693. PoCs published by Joxean Koret.
AI-analyzed exploit summary The provided text describes a vulnerability in Mambo Open Source where improper input validation allows arbitrary server-side script execution, XSS, and SQL injection via URI parameters. The example URI demonstrates path manipulation but lacks executable code.
Description
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.
Exploits (1)
The provided text describes a vulnerability in Mambo Open Source where improper input validation allows arbitrary server-side script execution, XSS, and SQL injection via URI parameters. The example URI demonstrates path manipulation but lacks executable code.