CVE-2006-3396: Miro International Galleria

Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Miro International Galleria: version 1.0_for_mambo only

Published 2006-07-06. Last modified 2026-06-16.