CVEs-PoC/2006/CVE-2006-4348.md

CVE-2006-4348

Description

PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

POC

Reference

• http://securityreason.com/securityalert/1447
• http://securityreason.com/securityalert/1447
• https://www.exploit-db.com/exploits/2215
• https://www.exploit-db.com/exploits/2215

Github

No PoCs found on GitHub currently.