Vulnerability in Mambo Bigape-Backup Component

CVE-2006-4296

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfig_absolute_path parameter.

EPSS: 0.034 (87.6th percentile) — read the EPSS interpretation.

Affected products

References