CVE-2006-4296

Mambo bigAPE-Backup Component - Remote File Inclusion via mosConfig_absolute_path Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4296. PoCs published by mdx.

AI-analyzed exploit summary This is a writeup describing a remote file inclusion vulnerability in the Mambo com_babackup component (version 1.1). The vulnerability allows an attacker to include a remote file via the 'mosConfig_absolute_path' parameter in Tar.php.

Description

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by mdx · textwebappsphp

https://www.exploit-db.com/exploits/2225

View Code ZIP pw:eip

This is a writeup describing a remote file inclusion vulnerability in the Mambo com_babackup component (version 1.1). The vulnerability allows an attacker to include a remote file via the 'mosConfig_absolute_path' parameter in Tar.php.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Mambo com_babackup component 1.1

No auth needed

Prerequisites: A vulnerable Mambo installation with the com_babackup component

MITRE ATT&CK