CVE-2006-3981: Mambo Gallery Manager

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

• Mambo Mambo Gallery Manager: up to and including 0.95r2

Published 2006-08-05. Last modified 2026-06-16.