CVE-2006-4995

BSQ Sitestats < 2.1.1 - Remote File Inclusion via mosConfig_absolute_path Parameter

Title source: llm
STIX 2.1

Description

PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

References (2)

Core 2
Core References
Various Sources x_refsource_confirm
http://forum.joomla.org/index.php/topic%2C79477.0.html

Scores

EPSS 0.0038
EPSS Percentile 59.7%

Details

Status published
Products (1)
joomla/bsq_sitestats 2.1.1
Published Sep 26, 2006
Tracked Since Feb 18, 2026