CVE-2006-3340

N/A Unknown

Published: July 03, 2006 Modified: April 16, 2026

Description

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the "includes" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://secunia.com/advisories/20819

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/27168

Source: cve@mitre.org

http://www.osvdb.org/27169

Source: cve@mitre.org

http://www.osvdb.org/27170

Source: cve@mitre.org

http://www.osvdb.org/27171

Source: cve@mitre.org

http://www.osvdb.org/27172

Source: cve@mitre.org

http://www.osvdb.org/27173

Source: cve@mitre.org

http://www.osvdb.org/27174

Source: cve@mitre.org

http://www.osvdb.org/27175

Source: cve@mitre.org

http://www.osvdb.org/27176

Source: cve@mitre.org

http://www.osvdb.org/27177

Source: cve@mitre.org

http://www.osvdb.org/27178

Source: cve@mitre.org

http://www.securityfocus.com/bid/18690

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/2561

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1956

Source: cve@mitre.org

http://secunia.com/advisories/20819