CVE-2006-3748: Mamboxchange Loudmouth

Medium severity, CVSS 6.8. EPSS: 5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and possibly other versions including 4.1, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Mamboxchange Loudmouth: version 4.0j only

Published 2006-07-21. Last modified 2026-06-16.