CVE-2006-3843

Calendar Mambo Module <1.5.7 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Matdhule · textwebappsphp

https://www.exploit-db.com/exploits/28233

View Code ZIP pw:eip

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/440407/100/0/threaded

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/19027

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/1272

Scores

EPSS 0.0282

EPSS Percentile 86.2%

Details

Status published

Products (1)

mambo/mambo_calendar 1.5.7

Published Jul 25, 2006

Tracked Since Feb 18, 2026