CVE-2006-4229: Joomla! Moslistmessenger Component
High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.
PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
Published 2006-08-18. Last modified 2026-06-16.