CVE-2005-3738

EXPLOITED

Mambo Site Server <= 4.0.14 - Remote PHP File Inclusion via mosConfig_absolute_path Parameter

Title source: llm

Exploitation Summary

CVE-2005-3738 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including rgod.

AI-analyzed exploit summary This exploit targets a global variable overwrite vulnerability in Mambo CMS <= 4.5.2, allowing remote command execution. It provides a web interface to input target details and execute arbitrary commands.

Description

globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1337

View Code ZIP pw:eip

This exploit targets a global variable overwrite vulnerability in Mambo CMS <= 4.5.2, allowing remote command execution. It provides a web interface to input target details and execute arbitrary commands.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Mambo CMS <= 4.5.2

No auth needed

Prerequisites: Target must be running Mambo CMS <= 4.5.2 · PHP must be installed on the attacker's machine

MITRE ATT&CK