CVE-2008-2905

This is a Metasploit module exploiting a remote file inclusion vulnerability in Mambo CMS (CVE-2008-2905). It leverages the `mosConfig_absolute_path` parameter in `Output.php` to include a malicious PHP payload, leading to remote code execution.

This is a Metasploit module exploiting a remote file inclusion vulnerability in Mambo CMS via the Cache_Lite package. It leverages the mosConfig_absolute_path parameter to include a remote PHP payload.

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Mambo CMS <= 4.6.4. The vulnerability exists in the `Output.php` file due to improper handling of the `mosConfig_absolute_path` parameter, allowing an attacker to include arbitrary remote files.

This Metasploit module exploits a remote file inclusion vulnerability in Mambo CMS by manipulating the `mosConfig_absolute_path` parameter in the Cache_Lite package. It sends a crafted HTTP request to include a remote PHP payload, leading to remote code execution.