CVE-2006-4270: Mambo Mambelfish Component

Medium severity, CVSS 6.8. EPSS: 3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Mambo Mambelfish Component: up to and including 1.1

Published 2006-08-21. Last modified 2026-06-16.