CVE-2006-3967

moskool 1.5 - Remote File Inclusion via mosConfig_absolute_path Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3967. PoCs published by saudi.unix.

AI-analyzed exploit summary The provided text describes a remote file inclusion vulnerability in Moskool 1.5, where unsanitized user input allows arbitrary remote file inclusion via the 'mosConfig_absolute_path' parameter. The example URL demonstrates how an attacker could execute malicious PHP code by including a remote shell.

Description

PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by saudi.unix · textwebappsphp

https://www.exploit-db.com/exploits/28310

View Code ZIP pw:eip

The provided text describes a remote file inclusion vulnerability in Moskool 1.5, where unsanitized user input allows arbitrary remote file inclusion via the 'mosConfig_absolute_path' parameter. The example URL demonstrates how an attacker could execute malicious PHP code by including a remote shell.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Theoretical

Target: Moskool 1.5

No auth needed

Prerequisites: Remote file inclusion must be enabled on the target server · Attacker must be able to host a malicious PHP file on an accessible web server

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →