CVE-2006-4553: Joomla! Com Comprofiler Component

Medium severity, CVSS 6.8. EPSS: 5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Joomla! Com Comprofiler Component: version 1.0_rc2 only
• Mambo Com Comprofiler Component: version 1.0_rc2 only

Published 2006-09-06. Last modified 2026-06-16.