CVE-2006-4858: Mamboxchange Serverstat Component

Medium severity, CVSS 6.8. EPSS: 6.9% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Mamboxchange Serverstat Component: up to and including 0.4.4

Published 2006-09-19. Last modified 2026-06-16.