CVE-2008-2905

Published: Jun 30, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected (23)

Products: Mambo: Mambo

Mambo

1 product

Mambo

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Mambo Mambo	Version 4.0.14
Mambo Mambo	Version 4.5.0.2
Mambo Mambo	Version 4.5.1.3
Mambo Mambo	Version 4.5.1_1.0.9
Mambo Mambo	Version 4.5.1_beta2
Mambo Mambo	Version 4.5.1_beta
Mambo Mambo	Version 4.5.1a
Mambo Mambo	Version 4.5.2.1
Mambo Mambo	Version 4.5.2.2
Mambo Mambo	Version 4.5.2.3
Mambo Mambo	Version 4.5.2
Mambo Mambo	Version 4.5.3h
Mambo Mambo	Version 4.5.4
Mambo Mambo	Version 4.5
Mambo Mambo	Version 4.5_1.0.0
Mambo Mambo	Version 4.5_1.0.1
Mambo Mambo	Version 4.5_1.0.2
Mambo Mambo	Version 4.5_1.0.3_beta
Mambo Mambo	Version 4.5_1.0.9
Mambo Mambo	Version 4.6.1
Mambo Mambo	Version 4.6.2
Mambo Mambo	Version 4.6.4
Mambo Mambo	Version 4.6