CVE-2006-3751: HTMLAREA3

Medium severity, CVSS 6.8. EPSS: 5.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_htmlarea3_xtd-c) for ImageManager 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• HTMLAREA3 HTMLAREA3: version 1.5 only

Published 2006-07-21. Last modified 2026-06-16.